6.3

CVE-2017-17171: huawei technologies co., ltd. huawei mate 8; huawei p9; huawei p9 plus Improper Input Validation

CVSS: 6.3v2.0MediumModified
Published 01-06-2018Last modified 05-08-2024
Open JSON

Vulnerability summary

CVE-2017-17171 is a medium (CVSS 6.3) Improper Input Validation vulnerability in huawei technologies co., ltd. huawei mate 8; huawei p9; huawei p9 plus. EPSS estimates a 0.47% chance of exploitation in the next 30 days, higher than 39.6% of scored vulnerabilities.

Overall risk
25/100
0100
Medium · default modelHow is this calculated?
CVSS score
6.3/10
010
Medium · v2.0 (NVD)
EPSS score
0.47%
0%100%
Low · 0.00 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Timeline

  1. 01-06-2018
    PublishedVulnerability first disclosed.
  2. 05-08-2024
    Last modifiedVulnerability information updated.

Description

Some Huawei smart phones have the denial of service (DoS) vulnerability due to the improper processing of malicious parameters. An attacker may trick a target user into installing a malicious APK and launch attacks using a pre-installed app with specific permissions. Successful exploit could allow the app to send specific parameters to the smart phone driver, which will result in system restart.

CVSS metrics

2 scores · 1 source · 2 versions

EPSS trend

Probability

0.47%

Chance of exploitation in the next 30 days

Percentile

40%

Versus all other CVEs

30-day change

0.00 pp

From 0.47% on 20-09-2026

20-09-202620-10-2026
EPSS score
0.47%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

Affected systems

Huawei3 products
  • mate_8_firmware< nxt-al10c00b593 | < nxt-cl00c92b593 | < nxt-dl00c17b593 | < nxt-l09c636b598a | < nxt-l09c185b583 | < nxt-l09c432b582 | < nxt-l09c605b585custc605d590 | < nxt-l29c10b583 | < nxt-l29c185b585 | < nxt-l29c636b594a | < nxtl00c01b593
  • p9_firmware< eva-al00c00b398 | < eva-al10c00b398 | < eva-cl00c92b398 | < eva-dl00c17b398 | < eva-l09c185b391 | < eva-l09c432b395 | < eva-l09c464b383 | < eva-l09c605b392 | ≤ eva-l09c636b388 | < eva-l19c10b394 | < eva-l19c432b392 | < eva-l19c605b390 | < eva-l19c636b393 | < eva-l29c636b389 | < eva-tl00c01b398
  • p9_plus_firmware< vie-l09c318b182 | < vie-l09c432b380 | < vie-l09c576b180 | < vie-l29c605b370 | < vie-l29c636b388
Huawei technologies co., ltd.1 product
  • huawei mate 8; huawei p9; huawei p9 plusHUAWEI Mate 8 Versions earlier than NXT-AL10C00B592 | Versions earlier than NXT-CL00C92B592 | Versions earlier than NXT-DL00C17B592 | Versions earlier than NXT-L09AC636B220 | Versions earlier than NXT-L09C185B582 | Versions earlier than NXT-L09C432B581 | Versions earlier than NXT-L09C605B585 | Versions earlier than NXT-L29C10B580 | Versions earlier than NXT-L29C185B582 | Versions earlier than NXT-L29C636B589 | Versions earlier than NXT-TL00C01B592 | HUAWEI P9 Versions earlier than EVA-AL00C00B398 | Versions earlier than EVA-AL10C00B398 | Versions earlier than EVA-CL00C92B398 | Versions earlier than EVA-DL00C17B398 | Versions earlier than EVA-L09C185B391 | Versions earlier than EVA-L09C432B395 | Versions earlier than EVA-L09C464B383 | Versions earlier than EVA-L09C605B392 | Versions earlier than EVA-L09C635B391 | Versions earlier than EVA-L09C636B388 | Versions earlier than EVA-L19C10B394 | Versions earlier than EVA-L19C432B392 | Versions earlier than EVA-L19C605B390 | Versions earlier than EVA-L19C636B393 | Versions earlier than EVA-L29C636B389 | Versions earlier than EVA-TL00C01B398 | HUAWEI P9 Plus Versions earlier than VIE-L09C318B182 | Versions earlier than VIE-L09C432B380 | Versions earlier than VIE-L09C576B180 | Versions earlier than VIE-L29C605B370 | Versions earlier than VIE-L29C636B388

2 vendors · 4 products

References

2 links