Vulnerability Details CVE-2017-2711
P9 Plus smartphones with software earlier than VIE-AL10C00B352 versions have an input validation vulnerability in the touchscreen Driver. An attacker can tricks a user into installing a malicious application on the smart phone, and send given parameter to smart phone to crash the system.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 19.6%
CVSS Severity
CVSS v3 Score 5.5
CVSS v2 Score 7.1
References
Products affected by CVE-2017-2711
-
cpe:2.3:h:huawei:p9_plus:-
-
cpe:2.3:o:huawei:p9_plus_firmware:eva-l09c636b388
-
cpe:2.3:o:huawei:p9_plus_firmware:vie-al10
-
cpe:2.3:o:huawei:p9_plus_firmware:vie-al10bc00b353
-
cpe:2.3:o:huawei:p9_plus_firmware:vie-al10bc00b356
-
cpe:2.3:o:huawei:p9_plus_firmware:vie-al10bc00b386