CVE-2017-8169
Last modified
CVE-2017-8169 is a vulnerability of currently unknown severity. Huawei smart phones with software earlier than VIE-L09C40B360 versions have a buffer overflow vulnerability due to the lack of parameter validation. An attacker tricks a user into installing a malicious APP which has the root privilege; the APP can send a specific parameter to the smart phone, causing the smartphone restart or arbitrary code execution.. EPSS estimates a 1.00% chance of exploitation in the next 30 days.
Description
Huawei smart phones with software earlier than VIE-L09C40B360 versions have a buffer overflow vulnerability due to the lack of parameter validation. An attacker tricks a user into installing a malicious APP which has the root privilege; the APP can send a specific parameter to the smart phone, causing the smartphone restart or arbitrary code execution.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Huawei | Vie-L09 Firmware | < vie-l09c40b360 |
References
- http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171025-01-overflow-enIssue Tracking, Vendor Advisory
- http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171025-01-overflow-enIssue Tracking, Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2017-8169?
How severe is CVE-2017-8169?
How do I fix CVE-2017-8169?
Are you affected by CVE-2017-8169?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST