CVE-2017-2734

Medium

Description

P9 Plus smartphones with software versions earlier before VIE-AL10BC00B386 have a denial of service (DoS) vulnerability. An attacker tricks a user into installing a malicious application on the smart phone, and the application can send given parameter to specific interface, which make a large number of memory allocation and the smart phone will be crash for memory exhaustion.

SeverityMedium
CVSS5.5
Exploit probability—
ProductHuawei P9 Plus Firmware
PublishedNov 22, 2017
First seenNov 22, 2017

How to fix

Update
  • huawei p9_plus_firmwarevie-al10bc00b386 or later

Affected products

ProductAffected versionsFixed in
huawei p9_plus_firmwarev < vie-al10bc00b386vie-al10bc00b386

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.

CVE-2017-2734 · Huawei P9 Plus Firmware · Dark Radar