Threat Investigation
Request a demo

CVE-2017-8172

Medium

Description

Isub service in P10 Plus and P10 smart phones with earlier than VKY-AL00C00B157 versions and earlier than VTR-AL00C00B157 versions has a denial of service (DoS) vulnerability. An attacker tricks a user into installing a malicious application on the smart phone, and the application can send given parameter to specific interface, which make a out-of-bounds array access that results in smart phone restart.

SeverityMedium
CVSS5.5
Exploit probability—
ProductHuawei P10 Plus Firmware
PublishedNov 22, 2017
First seenNov 22, 2017

How to fix

Update
  • huawei p10_plus_firmwarevky-al00c00b157 or later
  • huawei p10_firmwarevtr-al00c00b157 or later

Affected products

ProductAffected versionsFixed in
huawei p10_plus_firmwarev < vky-al00c00b157vky-al00c00b157
huawei p10_firmwarev < vtr-al00c00b157vtr-al00c00b157

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.