CVE-2017-17159
Medium
Description
Some Huawei smart phones with software of NXT-AL10C00B386, NXT-CL00C92B386, NXT-DL00C17B386, NXT-TL00C01B386SP01, NTS-AL00C00B535 have a DoS vulnerability due to insufficient input validation. An unauthenticated attacker could send malformed System Information(SI) messages to the smart phone within radio range by special wireless device. Successful exploit could make the smart phone restart.
SeverityMedium
CVSS6.5
Exploit probability—
ProductHuawei Nts-al00 Firmware
PublishedFeb 15, 2018
First seenFeb 15, 2018
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| huawei nts-al00_firmware | nts-al00c00b535 | — |
| huawei mt8-emui4.1_firmware | nxt-al10c00b386, nxt-cl00c92b386, nxt-dl00c17b386, nxt-tl00c01b386sp01 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.