CVE-2017-8144
Description
Honor 5A,Honor 8 Lite,Mate9,Mate9 Pro,P10,P10 Plus Huawei smartphones with software the versions before CAM-L03C605B143CUSTC605D003,the versions before Prague-L03C605B161,the versions before Prague-L23C605B160,the versions before MHA-AL00C00B225,the versions before LON-AL00C00B225,the versions before VTR-AL00C00B167,the versions before VTR-TL00C01B167,the versions before VKY-AL00C00B167,the versions before VKY-TL00C01B167 have a resource exhaustion vulnerability due to configure setting. An attacker tricks a user into installing a malicious application, the application may turn on the device flash-light and rapidly drain the device battery.
How to fix
- huawei honor_5a_firmwarecam-l03c605b143custc605d003 or later
- huawei honor_8_lite_firmwareprague-l03c605b161, prague-l23c605b160 or later
- huawei mate_9_firmwaremha-al00c00b225 or later
- huawei mate_9_pro_firmwarelon-al00c00b225 or later
- huawei p10_firmwarevtr-al00c00b167, vtr-tl00c01b167 or later
- huawei p10_plus_firmwarevky-al00c00b167, vky-tl00c01b167 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| huawei honor_5a_firmware | v < cam-l03c605b143custc605d003 | cam-l03c605b143custc605d003 |
| huawei honor_8_lite_firmware | v < prague-l03c605b161, v < prague-l23c605b160 | prague-l03c605b161, prague-l23c605b160 |
| huawei mate_9_firmware | v < mha-al00c00b225 | mha-al00c00b225 |
| huawei mate_9_pro_firmware | v < lon-al00c00b225 | lon-al00c00b225 |
| huawei p10_firmware | v < vtr-al00c00b167, v < vtr-tl00c01b167 | vtr-al00c00b167, vtr-tl00c01b167 |
| huawei p10_plus_firmware | v < vky-al00c00b167, v < vky-tl00c01b167 | vky-al00c00b167, vky-tl00c01b167 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.