PT-2017-15500 · Huawei · Huawei P9

Publicado 2017-11-22 · Atualizado 2017-12-12 · CVE-2017-2713

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Média

Vetor base

AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions HUAWEI P9 smartphones with software versions earlier than EVA-L09C432B383 HUAWEI P9 smartphones with software versions earlier than EVA-L09C636B380 HUAWEI P9 smartphones with software versions earlier than VIE-L09C432B370 HUAWEI P9 smartphones with software versions earlier than VIE-L09C636B370

Description The issue is related to insufficient input validation, which could be exploited by an attacker to tamper with air interface signaling messages and obtain some communication information.

Recommendations For versions earlier than EVA-L09C432B383, update to EVA-L09C432B383 or later. For versions earlier than EVA-L09C636B380, update to EVA-L09C636B380 or later. For versions earlier than VIE-L09C432B370, update to VIE-L09C432B370 or later. For versions earlier than VIE-L09C636B370, update to VIE-L09C636B370 or later.

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2017-2713

Produtos afetados

Huawei P9

Referências · 3

• https://nvd.nist.gov/vuln/detail/CVE-2017-2713 · Nota de Segurança
• http://huawei.com/en/psirt/security-advisories/huawei-sa-20170419-01-smartphone-en · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2017-2713 · Aviso do Fabricante