CVE-2017-17159
Last modified
CVE-2017-17159 is a vulnerability of currently unknown severity. Some Huawei smart phones with software of NXT-AL10C00B386, NXT-CL00C92B386, NXT-DL00C17B386, NXT-TL00C01B386SP01, NTS-AL00C00B535 have a DoS vulnerability due to insufficient input validation. An unauthenticated attacker could send malformed System Information(SI) messages to the smart phone within radio range by special wireless device. EPSS estimates a 0.38% chance of exploitation in the next 30 days.
Description
Some Huawei smart phones with software of NXT-AL10C00B386, NXT-CL00C92B386, NXT-DL00C17B386, NXT-TL00C01B386SP01, NTS-AL00C00B535 have a DoS vulnerability due to insufficient input validation. An unauthenticated attacker could send malformed System Information(SI) messages to the smart phone within radio range by special wireless device. Successful exploit could make the smart phone restart.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Huawei | Mt8-Emui4.1 Firmware | nxt-al10c00b386 |
| Huawei | Mt8-Emui4.1 Firmware | nxt-cl00c92b386 |
| Huawei | Mt8-Emui4.1 Firmware | nxt-dl00c17b386 |
| Huawei | Mt8-Emui4.1 Firmware | nxt-tl00c01b386sp01 |
| Huawei | Nts-Al00 Firmware | nts-al00c00b535 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2017-17159?
How severe is CVE-2017-17159?
How do I fix CVE-2017-17159?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2017
- CVE-2017-17153IKEv2 in Huawei IPS Module V500R001C00, V500R001C00SPC200, V…
- CVE-2017-17154IKEv2 in Huawei IPS Module V500R001C00, V500R001C00SPC200, V…
- CVE-2017-17155IKEv2 in Huawei IPS Module V500R001C00, V500R001C00SPC200, V…
- CVE-2017-17156IKEv2 in Huawei IPS Module V500R001C00, V500R001C00SPC200, V…
- CVE-2017-17157IKEv2 in Huawei IPS Module V500R001C00, V500R001C00SPC200, V…
- CVE-2017-17158Some Huawei smart phones with the versions before Berlin-L21…
- CVE-2017-1716IBM Tivoli Workload Scheduler 8.6.0, 9.1.0, and 9.2.0 could …
- CVE-2017-17160Huawei AR120-S V200R006C10, V200R007C00, AR1200 V200R006C10,…
- CVE-2017-17161The 'Find Phone' function in some Huawei smart phones with s…
- CVE-2017-17162Huawei Secospace USG6600 V500R001C30SPC100, Secospace USG660…
- CVE-2017-17163Huawei Secospace USG6600 V500R001C30SPC100 has an Out-of-Bou…
- CVE-2017-17164Huawei Secospace AntiDDoS8000 V500R001C20SPC500 have a memor…
Are you affected by CVE-2017-17159?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST