Vulnerability Details CVE-2017-8170
Huawei smart phones with software earlier than VIE-L09C40B360 versions have a buffer overflow vulnerability due to the lack of parameter validation. An attacker tricks a user into installing a malicious APP which has the root privilege; the APP can send a specific parameter to the smart phone, causing the smartphone restart or arbitrary code execution.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 39.7%
CVSS Severity
CVSS v3 Score 7.8
CVSS v2 Score 9.3
References
Products affected by CVE-2017-8170
-
cpe:2.3:h:huawei:vie-l09:-
-
cpe:2.3:o:huawei:vie-l09_firmware:vie-l09c02b131
-
cpe:2.3:o:huawei:vie-l09_firmware:vie-l09c25b120
-
cpe:2.3:o:huawei:vie-l09_firmware:vie-l09c40b181