Huawei Mha Al00A vulnerabilities

4 vulnerabilities

Known vulnerabilities in Huawei Mha Al00A, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

5.5CVE-2017-17201huawei technologies co., ltd.btv-emui5.0,berlin-emui5.0,berlin-l21,berlin-l22,berlin-l23,mha-al00a+6
EPSS score
0.54%
Some huawei smartphones with software BTV-DL09C233B350, Berlin-L21HNC432B360, Berlin-L22HNC636B360, Berlin-L24HNC567B360, Berlin-L21C10B130, Berlin-L21C185B132, Berlin-L21C464B130, Berlin-L22C346B140, Berlin-L22C636B160, Berlin-L23C605B131, Berlin-L23DOMC109B160, MHA-AL00AC00B125 have a DoS vulnerability. Due to insufficient input validation, an attacker could trick a user to execute a malicious application, which could be exploited by attacker to launch DoS attacks.
7.1CVE-2017-17328huawei technologies co., ltd.mha-al00a+1
EPSS score
0.75%
Huawei smartphones with software of MHA-AL00AC00B125 have an integer overflow vulnerability. The software does not process certain variable properly when handle certain process. An attacker tricks the user who has root privilege to install a crafted application, successful exploit could cause information disclosure.
5.5CVE-2017-17327huawei technologies co., ltd.mha-al00a+1
EPSS score
0.54%
Huawei smartphones with software of MHA-AL00AC00B125 have an improper resource management vulnerability. The software does not properly manage the resource when do device register operation. An attacker tricks the user who has root privilege to install a crafted application, successful exploit could cause certain service unavailable.
7.1CVE-2017-8186huawei technologies co., ltd.mha-al00a+1
EPSS score
0.55%
The Bastet of some Huawei mobile phones with software of earlier than MHA-AL00BC00B231 versions has a DOS vulnerability due to the lack of parameter validation. An attacker may trick a user into installing a malicious APP. The APP can modify specific parameter to cause system reboot.