CVE-2017-8175 The Bastet of some Huawei mobile phones with software earlier than Vicky-AL00AC00B167 versions, earlier than Victoria-AL00AC00B167 versions, earlier than Warsaw-AL00C00B191 versions has an insufficien...
MediumCVSS 5.5
EPSS 0.55%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The Bastet of some Huawei mobile phones with software earlier than Vicky-AL00AC00B167 versions, earlier than Victoria-AL00AC00B167 versions, earlier than Warsaw-AL00C00B191 versions has an insufficient input validation vulnerability due to the lack of parameter validation. An attacker may trick a user into installing a malicious APP. The APP can modify specific parameter to cause system reboot.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Huawei vicky-al00a | < vicky-al00ac00b167 | vicky-al00ac00b167 |
| Huawei victoria-al00a | < victoria-al00ac00b167 | victoria-al00ac00b167 |
| Huawei warsaw-al00 | < warsaw-al00c00b191 | warsaw-al00c00b191 |
| Huawei Technologies Co., Ltd. Vicky-AL00A,Victoria-AL00A,Warsaw-AL00 | = Earlier than Vicky-AL00AC00B167 versions,Earlier than Victoria-AL00AC00B167 versions,Earlier than Warsaw-AL00C00B191 versions | No fix listed |
References
- www.huawei.com vendor-advisory