5.3med

CVE-2017-15345

Huawei Smartphones with software LON-L29DC721B186 have a denial of service vulnerability.

Published 8 y ago · modified 4 mo ago · JSON

CVSS
5.3
v3.0 · NVD
CISA KEV
No
not known exploited
EPSS
0.3%
percentile 23%
Public exploits
0
none known

Summary

Huawei Smartphones with software LON-L29DC721B186 have a denial of service vulnerability. An attacker could make an loop exit condition that cannot be reached by sending the crafted 3GPP message. Successful exploit could cause the device to reboot.

Exploit prediction (EPSS)

0.30% probability of exploitation in the next 30 days, higher than 23% of all scored CVEs.

CVSS scores

Assigned byVersionScoreVector
NVD3.05.3CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
NVD2.05.7AV:A/AC:M/Au:N/C:N/I:N/A:C

Affected products

  • Huawei Technologies Co., Ltd. LON-L29D

Classification

Weakness
  • CWE-400 Uncontrolled Resource Consumption

References

  • huawei.com /en/psirt/security-advisories/huawei-sa-20171108-01-smartphone-en · x_refsource_CONFIRM, x_transferred

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.