Threat Investigation
Request a demo

CVE-2017-2725

High

Description

Bastet in P10 Plus and P10 smart phones with software earlier than VKY-AL00C00B123 versions, earlier than VTR-AL00C00B123 versions have a buffer overflow vulnerability. An attacker with the root privilege of an Android system may trick a user into installing a malicious APP. The APP can modify specific data to cause buffer overflow in the next system reboot, causing continuous system reboot or arbitrary code execution.

SeverityHigh
CVSS7.8
Exploit probability—
ProductHuawei P10 Firmware
PublishedNov 22, 2017
First seenNov 22, 2017

How to fix

Update
  • huawei p10_firmwarevtr-al00c00b123 or later
  • huawei p10_plus_firmwarevky-al00c00b123 or later

Affected products

ProductAffected versionsFixed in
huawei p10_firmwarev < vtr-al00c00b123vtr-al00c00b123
huawei p10_plus_firmwarev < vky-al00c00b123vky-al00c00b123

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.