5.3med
CVE-2017-15345
Huawei Smartphones with software LON-L29DC721B186 have a denial of service vulnerability.
Published 8 y ago · modified 4 mo ago · JSON
CVSS
5.3
v3.0 · NVD
CISA KEV
No
not known exploited
EPSS
0.3%
percentile 23%
Public exploits
0
none known
Summary
Huawei Smartphones with software LON-L29DC721B186 have a denial of service vulnerability. An attacker could make an loop exit condition that cannot be reached by sending the crafted 3GPP message. Successful exploit could cause the device to reboot.
Exploit prediction (EPSS)
0.30% probability of exploitation in the next 30 days, higher than 23% of all scored CVEs.
CVSS scores
| Assigned by | Version | Score | Vector |
|---|---|---|---|
| NVD | 3.0 | 5.3 | CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H |
| NVD | 2.0 | 5.7 | AV:A/AC:M/Au:N/C:N/I:N/A:C |
Affected products
- Huawei Technologies Co., Ltd. LON-L29D
Classification
- Weakness
- CWE-400 Uncontrolled Resource Consumption
References
- huawei.com /en/psirt/security-advisories/huawei-sa-20171108-01-smartphone-en · x_refsource_CONFIRM, x_transferred
Sources
- CVE List: CVE-2017-15345
- NVD: CVE-2017-15345
vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.