What is the severity of CVE-2017-17158?

CVE-2017-17158 has a medium severity rating due to its potential impact on user data and device security.

How do I fix CVE-2017-17158?

To fix CVE-2017-17158, update your Huawei device firmware to the versions that are not affected as listed in the CVE advisory.

Which Huawei devices are affected by CVE-2017-17158?

CVE-2017-17158 affects several Huawei smartphone models, specifically those running firmware versions prior to specific update numbers outlined in the vulnerability description.

What type of vulnerability is CVE-2017-17158?

CVE-2017-17158 is a security vulnerability that could allow unauthorized access to sensitive data on affected Huawei devices.

When was CVE-2017-17158 disclosed?

CVE-2017-17158 was disclosed on May 23, 2018, by Huawei through their security advisory.

Vulnerability/
CVE-2017-17158

medium

4.6

CWE

24/5/2018

26/6/2018

CVE-2017-17158: Input Validation

First published: Thu May 24 2018(Updated: )

Some Huawei smart phones with the versions before Berlin-L21HNC185B381; the versions before Prague-AL00AC00B223; the versions before Prague-AL00BC00B223; the versions before Prague-AL00CC00B223; the versions before Prague-L31C432B208; the versions before Prague-TL00AC01B223; the versions before Prague-TL00AC01B223 have an information exposure vulnerability. When the user's smart phone connects to the malicious device for charging, an unauthenticated attacker may activate some specific function by sending some specially crafted messages. Due to insufficient input validation of the messages, successful exploit may cause information exposure.

Credit: psirt@huawei.com

Affected Software	Affected Version	How to fix
Huawei Berlin-l21hn Firmware	<l21hnc185b381
Huawei Berlin-l21hn
Huawei Prague-al00a Firmware	<al00ac00b223
Huawei Prague-al00a
Huawei Prague-al00b Firmware	<al00bc00b223
Huawei Prague-al00b
Huawei Prague-al00c Firmware	<al00cc00b223
Huawei Prague-al00c
Huawei Prague-l31 Firmware	<l31c432b208
Huawei Prague-l31
Huawei Prague-tl00a Firmware	<tl00ac01b223
Huawei Prague-tl00a
Huawei Prague-tl10a Firmware	<tl00ac01b223
Huawei Prague-tl10a

Never miss a vulnerability like this again

Reference Links

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180523-01-phone-en

Frequently Asked Questions

What is the severity of CVE-2017-17158?
CVE-2017-17158 has a medium severity rating due to its potential impact on user data and device security.
How do I fix CVE-2017-17158?
To fix CVE-2017-17158, update your Huawei device firmware to the versions that are not affected as listed in the CVE advisory.
Which Huawei devices are affected by CVE-2017-17158?
CVE-2017-17158 affects several Huawei smartphone models, specifically those running firmware versions prior to specific update numbers outlined in the vulnerability description.
What type of vulnerability is CVE-2017-17158?
CVE-2017-17158 is a security vulnerability that could allow unauthorized access to sensitive data on affected Huawei devices.
When was CVE-2017-17158 disclosed?
CVE-2017-17158 was disclosed on May 23, 2018, by Huawei through their security advisory.

Frequently Asked Questions

What is the severity of CVE-2017-17158?
CVE-2017-17158 has a medium severity rating due to its potential impact on user data and device security.
How do I fix CVE-2017-17158?
To fix CVE-2017-17158, update your Huawei device firmware to the versions that are not affected as listed in the CVE advisory.
Which Huawei devices are affected by CVE-2017-17158?
CVE-2017-17158 affects several Huawei smartphone models, specifically those running firmware versions prior to specific update numbers outlined in the vulnerability description.
What type of vulnerability is CVE-2017-17158?
CVE-2017-17158 is a security vulnerability that could allow unauthorized access to sensitive data on affected Huawei devices.
When was CVE-2017-17158 disclosed?
CVE-2017-17158 was disclosed on May 23, 2018, by Huawei through their security advisory.

CVE-2017-17158: Input Validation

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is the severity of CVE-2017-17158?

How do I fix CVE-2017-17158?

Which Huawei devices are affected by CVE-2017-17158?

What type of vulnerability is CVE-2017-17158?

When was CVE-2017-17158 disclosed?

Company

Resources

Contact

Frequently Asked Questions

What is the severity of CVE-2017-17158?

How do I fix CVE-2017-17158?

Which Huawei devices are affected by CVE-2017-17158?

What type of vulnerability is CVE-2017-17158?

When was CVE-2017-17158 disclosed?