PT-2017-15500 · Huawei · Huawei P9

Published 2017-11-22 · Updated 2017-12-12 · CVE-2017-2713

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions HUAWEI P9 smartphones with software versions earlier than EVA-L09C432B383 HUAWEI P9 smartphones with software versions earlier than EVA-L09C636B380 HUAWEI P9 smartphones with software versions earlier than VIE-L09C432B370 HUAWEI P9 smartphones with software versions earlier than VIE-L09C636B370

Description The issue is related to insufficient input validation, which could be exploited by an attacker to tamper with air interface signaling messages and obtain some communication information.

Recommendations For versions earlier than EVA-L09C432B383, update to EVA-L09C432B383 or later. For versions earlier than EVA-L09C636B380, update to EVA-L09C636B380 or later. For versions earlier than VIE-L09C432B370, update to VIE-L09C432B370 or later. For versions earlier than VIE-L09C636B370, update to VIE-L09C636B370 or later.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2017-2713

Affected Products

Huawei P9

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2017-2713 · Security Note
• http://huawei.com/en/psirt/security-advisories/huawei-sa-20170419-01-smartphone-en · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2017-2713 · Vendor Advisory