5.5med
CVE-2017-2709
HiGame with software earlier than 7.3.0 versions, SkyTone with software earlier than 8.1.1 versions have a DoS Vulnerability.
Published 8 y ago · modified 4 mo ago · JSON
CVSS
5.5
v3.0 · NVD
CISA KEV
No
not known exploited
EPSS
0.5%
percentile 46%
Public exploits
0
none known
Summary
HiGame with software earlier than 7.3.0 versions, SkyTone with software earlier than 8.1.1 versions have a DoS Vulnerability. An attacker tricks a user into installing a malicious application on the smart phone, the attacker can send malformed packets to the device. Due to the lack of adequate input validation of APPs, which causes the APPs Denial of Service.
Exploit prediction (EPSS)
0.54% probability of exploitation in the next 30 days, higher than 46% of all scored CVEs.
CVSS scores
| Assigned by | Version | Score | Vector |
|---|---|---|---|
| NVD | 3.0 | 5.5 | CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H |
| NVD | 2.0 | 4.3 | AV:N/AC:M/Au:N/C:N/I:N/A:P |
Affected products
- Huawei Technologies Co., Ltd. HiGame, SkyTone
Classification
- Weakness
- CWE-20 Improper Input Validation
References
- huawei.com /en/psirt/security-advisories/huawei-sa-20170913-01-appdos-en · x_refsource_CONFIRM, x_transferred
Sources
- CVE List: CVE-2017-2709
- NVD: CVE-2017-2709
vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.