Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveHuaweiCVE-2017-15311
HistoryDec 22, 2017 - 5:29 p.m.

CVE-2017-15311

2017-12-2217:29:13
CWE-119
huawei
web.nvd.nist.gov
42
huawei
baseband modules
vulnerability
mate 10
mate 9
denial of service
remote code execution
cve-2017-15311

CVSS2

5.8

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:A/AC:L/Au:N/C:P/I:P/A:P

CVSS3

8.8

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

8.9

Confidence

High

EPSS

0.011

Percentile

84.7%

JSON

The baseband modules of Mate 10, Mate 10 Pro, Mate 9, Mate 9 Pro Huawei smart phones with software before ALP-AL00 8.0.0.120(SP2C00), before BLA-AL00 8.0.0.120(SP2C00), before MHA-AL00B 8.0.0.334(C00), and before LON-AL00B 8.0.0.334(C00) have a stack overflow vulnerability due to the lack of parameter validation. An attacker could send malicious packets to the smart phones within radio range by special wireless device, which leads stack overflow when the baseband module handles these packets. The attacker could exploit this vulnerability to perform a denial of service attack or remote code execution in baseband module.

Affected configurations

Nvd
Vulners
Node
huaweimate_10_firmwareRange<alp-al00_8.0.0.120\(sp2c00\)
AND
huaweimate_10Match-
Node
huaweimate_10_pro_firmwareRange<bla-al00_8.0.0.120\(sp2c00\)
AND
huaweimate_10_proMatch-
Node
huaweimate_9_firmwareRange<mha-al00b_8.0.0.334\(c00\)
AND
huaweimate_9Match-
Node
huaweimate_9_pro_firmwareRange<lon-al00b_8.0.0.334\(c00\)
AND
huaweimate_9_proMatch-
VendorProductVersionCPE
huaweimate_10_firmware*cpe:2.3:o:huawei:mate_10_firmware:*:*:*:*:*:*:*:*
huaweimate_10-cpe:2.3:h:huawei:mate_10:-:*:*:*:*:*:*:*
huaweimate_10_pro_firmware*cpe:2.3:o:huawei:mate_10_pro_firmware:*:*:*:*:*:*:*:*
huaweimate_10_pro-cpe:2.3:h:huawei:mate_10_pro:-:*:*:*:*:*:*:*
huaweimate_9_firmware*cpe:2.3:o:huawei:mate_9_firmware:*:*:*:*:*:*:*:*
huaweimate_9-cpe:2.3:h:huawei:mate_9:-:*:*:*:*:*:*:*
huaweimate_9_pro_firmware*cpe:2.3:o:huawei:mate_9_pro_firmware:*:*:*:*:*:*:*:*
huaweimate_9_pro-cpe:2.3:h:huawei:mate_9_pro:-:*:*:*:*:*:*:*

CNA Affected

[
  {
    "product": "Mate 10",
    "vendor": "Huawei Technologies Co., Ltd.",
    "versions": [
      {
        "status": "affected",
        "version": "before ALP-AL00 8.0.0.120(SP2C00)"
      }
    ]
  },
  {
    "product": "Mate 10 Pro",
    "vendor": "Huawei Technologies Co., Ltd.",
    "versions": [
      {
        "status": "affected",
        "version": "before BLA-AL00 8.0.0.120(SP2C00)"
      }
    ]
  },
  {
    "product": "Mate 9",
    "vendor": "Huawei Technologies Co., Ltd.",
    "versions": [
      {
        "status": "affected",
        "version": "before MHA-AL00B 8.0.0.334(C00)"
      }
    ]
  },
  {
    "product": "Mate 9 Pro",
    "vendor": "Huawei Technologies Co., Ltd.",
    "versions": [
      {
        "status": "affected",
        "version": "before LON-AL00B 8.0.0.334(C00),"
      }
    ]
  }
]

Related

prion 1
huawei 1
cvelist 1
nvd 1
prion
prion
Stack overflow
2017-12-22 17:29:00
huawei
huawei
Security Advisory - Stack Overflow Vulnerability in Baseband Module of Some Huawei Smart Phones
2017-11-25 00:00:00
cvelist
cvelist
CVE-2017-15311
2017-12-22 17:00:00
nvd
nvd
CVE-2017-15311
2017-12-22 17:29:13

CVSS2

5.8

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:A/AC:L/Au:N/C:P/I:P/A:P

CVSS3

8.8

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

8.9

Confidence

High

EPSS

0.011

Percentile

84.7%

JSON
Related for CVE-2017-15311
prion1huawei1cvelist1nvd1