CVE-2017-17327 — MEDIUM (5.5)

Vulnerability Description

Huawei smartphones with software of MHA-AL00AC00B125 have an improper resource management vulnerability. The software does not properly manage the resource when do device register operation. An attacker tricks the user who has root privilege to install a crafted application, successful exploit could cause certain service unavailable.

CVSS Score

5.5

MEDIUM

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality

NONE

Integrity

NONE

Availability

HIGH

Affected Products

Vendor	Product	Versions
Huawei	Mha-Al00A Firmware	mha-al00ac00b125
Huawei	Mha-Al00A	-

References

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171220-03-smartphVendor Advisory
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171220-03-smartphVendor Advisory

FAQ

What is CVE-2017-17327?

CVE-2017-17327 is a vulnerability with a CVSS score of 5.5 (MEDIUM). Huawei smartphones with software of MHA-AL00AC00B125 have an improper resource management vulnerability. The software does not properly manage the resource when do device register operation. An attack...

How severe is CVE-2017-17327?

CVE-2017-17327 has been rated MEDIUM with a CVSS base score of 5.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2017-17327?

Check the references section above for vendor advisories and patch information. Affected products include: Huawei Mha-Al00A Firmware, Huawei Mha-Al00A.