CVE-2017-2701 — LOW (3.3) — White Hats Nepal

Vulnerability Description

Mate 9 with software MHA-AL00AC00B125 has a denial of service (DoS) vulnerability. An attacker tricks a user into installing a malicious application. Since the system does not verify the broadcasting message from the application, it could be exploited to cause some functions of system unavailable.

CVSS Score

3.3

LOW

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality

NONE

Integrity

NONE

Availability

LOW

Affected Products

Vendor	Product	Versions
Huawei	Mate 9 Firmware	mha-al00ac00b125
Huawei	Mate 9	-

Related Weaknesses (CWE)

CWE-345

References

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170802-01-broadcaMitigationVendor Advisory
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170802-01-broadcaMitigationVendor Advisory

FAQ

What is CVE-2017-2701?

CVE-2017-2701 is a vulnerability with a CVSS score of 3.3 (LOW). Mate 9 with software MHA-AL00AC00B125 has a denial of service (DoS) vulnerability. An attacker tricks a user into installing a malicious application. Since the system does not verify the broadcasting ...

How severe is CVE-2017-2701?

CVE-2017-2701 has been rated LOW with a CVSS base score of 3.3/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2017-2701?

Check the references section above for vendor advisories and patch information. Affected products include: Huawei Mate 9 Firmware, Huawei Mate 9.