Skip to content
OpenAdvisories
Unscored CVE-2017-8175 EUVD-2017-17137GHSA-93vm-vr25-rpf7

The Bastet of some Huawei mobile phones with software earlier than Vicky-AL00AC00B167 versions, earlier than Victoria-AL00AC00B167 versions…

Published Nov 22, 2017 · Updated Sep 16, 2024 · Assigned by huawei

Vendor: Huawei Product: Vicky-AL00A,Victoria-AL00A,Warsaw-AL00 Category: Network devices

Description

The Bastet of some Huawei mobile phones with software earlier than Vicky-AL00AC00B167 versions, earlier than Victoria-AL00AC00B167 versions, earlier than Warsaw-AL00C00B191 versions has an insufficient input validation vulnerability due to the lack of parameter validation. An attacker may trick a user into installing a malicious APP. The APP can modify specific parameter to cause system reboot.

Affected products

VendorProductAffectedFixed
Huawei Technologies Vicky-AL00A,Victoria-AL00A,Warsaw-AL00 Earlier than Vicky-AL00AC00B167 versions,Earlier than Victoria-AL00AC00B167 versions,Earlier than Warsaw-AL00C00B191 versions —

References