Overview
- Description
- Some Huawei smart phones with software of NXT-AL10C00B386, NXT-CL00C92B386, NXT-DL00C17B386, NXT-TL00C01B386SP01, NTS-AL00C00B535 have a DoS vulnerability due to insufficient input validation. An unauthenticated attacker could send malformed System Information(SI) messages to the smart phone within radio range by special wireless device. Successful exploit could make the smart phone restart.
- Source
- psirt@huawei.com
- NVD status
- Analyzed
Risk scores
CVSS 3.0
- Type
- Primary
- Base score
- 6.5
- Impact score
- 3.6
- Exploitability score
- 2.8
- Vector string
- CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- Severity
- MEDIUM
CVSS 2.0
- Type
- Primary
- Base score
- 6.1
- Impact score
- 6.9
- Exploitability score
- 6.5
- Vector string
- AV:A/AC:L/Au:N/C:N/I:N/A:C
Weaknesses
- nvd@nist.gov
- CWE-20
Social media
- Hype score
- Not currently trending
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:huawei:mt8-emui4.1_firmware:nxt-al10c00b386:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "62CAA661-6E9F-41AE-90E4-A6A7A8020B7C"
},
{
"criteria": "cpe:2.3:o:huawei:mt8-emui4.1_firmware:nxt-cl00c92b386:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C62251E4-B231-475C-A05D-C313FC903F98"
},
{
"criteria": "cpe:2.3:o:huawei:mt8-emui4.1_firmware:nxt-dl00c17b386:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4BAB4BA7-E393-4393-84F5-A17096D98A39"
},
{
"criteria": "cpe:2.3:o:huawei:mt8-emui4.1_firmware:nxt-tl00c01b386sp01:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BA8972C3-53D2-413B-A1E3-E1EA92CAED2E"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:huawei:mt8-emui4.1:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "3CAACD61-C2A8-4C6B-BABF-503B732D7ACB"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:huawei:nts-al00_firmware:nts-al00c00b535:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9A67583F-687E-4F3F-9B34-9016C68985DA"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:huawei:nts-al00:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "57B9A942-4791-4B65-9EB7-8E52F6C3A25A"
}
],
"operator": "OR"
}
],
"operator": "AND"
}
]