Honor 5A,Honor 8 Lite,Mate9,Mate9 Pro,P10,P10 Plus Huawei smartphones with software the versions before CAM-L03C605B143CUSTC605D003,the ver…

Published 8 y ago 2017-11-22 · modified 4 mo ago 2026-06-17 · JSON

CVSS

5.5

v3.0 · NVD

CISA KEV

not known exploited

EPSS

0.5%

percentile 46%

Public exploits

none known

Honor 5A,Honor 8 Lite,Mate9,Mate9 Pro,P10,P10 Plus Huawei smartphones with software the versions before CAM-L03C605B143CUSTC605D003,the versions before Prague-L03C605B161,the versions before Prague-L23C605B160,the versions before MHA-AL00C00B225,the versions before LON-AL00C00B225,the versions before VTR-AL00C00B167,the versions before VTR-TL00C01B167,the versions before VKY-AL00C00B167,the versions before VKY-TL00C01B167 have a resource exhaustion vulnerability due to configure setting. An attacker tricks a user into installing a malicious application, the application may turn on the device flash-light and rapidly drain the device battery.

Exploit prediction (EPSS)

0.55% probability of exploitation in the next 30 days, higher than 46% of all scored CVEs.

CVSS scores

Assigned by	Version	Score	Vector
NVD	3.0	5.5	`CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H`
NVD	2.0	7.1	`AV:N/AC:M/Au:N/C:N/I:N/A:C`

Affected products

Huawei Technologies Co., Ltd. Honor 5A,Honor 8 Lite,Mate9,Mate9 Pro,P10,P10 Plus

Classification

Weakness

CWE-920 Improper Restriction of Power Consumption

References

huawei.com /en/psirt/security-advisories/huawei-sa-20170725-01-smartphone-en · x_refsource_CONFIRM, x_transferred

Sources

CVE List: CVE-2017-8144
NVD: CVE-2017-8144

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.