1. Home
  2. CVE Database
  3. CVE-2017-8178
MEDIUM · 5.4

CVE-2017-8178

Huawei Email APP Vicky-AL00 smartphones with software of earlier than VKY-AL00C00B171 versions has a stored cross-site scripting vulnerability. A remote attacker could exploit this vulnerability to se...

Vulnerability Description

Huawei Email APP Vicky-AL00 smartphones with software of earlier than VKY-AL00C00B171 versions has a stored cross-site scripting vulnerability. A remote attacker could exploit this vulnerability to send email that storing malicious code to a smartphone and waiting for a user to access this email that triggers execution of the code. An exploit could allow the attacker to execute arbitrary script code on the affected device.

CVSS Score

5.4

MEDIUM

CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality
LOW
Integrity
LOW
Availability
NONE

Affected Products

VendorProductVersions
HuaweiVicky-Al00 Firmware< vky-al00c00b171
HuaweiVicky-Al00-

Related Weaknesses (CWE)

CWE-79

References

FAQ

What is CVE-2017-8178?

CVE-2017-8178 is a vulnerability with a CVSS score of 5.4 (MEDIUM). Huawei Email APP Vicky-AL00 smartphones with software of earlier than VKY-AL00C00B171 versions has a stored cross-site scripting vulnerability. A remote attacker could exploit this vulnerability to se...

How severe is CVE-2017-8178?

CVE-2017-8178 has been rated MEDIUM with a CVSS base score of 5.4/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2017-8178?

Check the references section above for vendor advisories and patch information. Affected products include: Huawei Vicky-Al00 Firmware, Huawei Vicky-Al00.