What is CVE-2017-8144?

CVE-2017-8144 is a medium-severity vulnerability in Huawei Honor 5a, classified under Improper Restriction of Power Consumption. CVSS score: 5.5/10. Published 2017-11-22.

How severe is CVE-2017-8144?

Medium severity. CVSS v3 base score is 5.5 out of 10.

Vulnerability in Huawei Honor 5a

CVE-2017-8144

Honor 5A,Honor 8 Lite,Mate9,Mate9 Pro,P10,P10 Plus Huawei smartphones with software the versions before CAM-L03C605B143CUSTC605D003,the versions before Prague-L03C605B161,the versions before Prague-L23C605B160,the versions before MHA-AL00C00B225,the versions before LON-AL00C00B225,the versions before VTR-AL00C00B167,the versions before VTR-TL00C01B167,the versions before VKY-AL00C00B167,the versions before VKY-TL00C01B167 have a resource exhaustion vulnerability due to configure setting. An attacker tricks a user into installing a malicious application, the application may turn on the device flash-light and rapidly drain the device battery.

EPSS: 0.005 (43.9th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.5 (Medium). Vector: CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H.

Affected products

Weakness classification (CWE)

CWE-920 — Improper Restriction of Power Consumption

References

psirt@huawei.com (x_refsource_CONFIRM, Vendor Advisory)

Frequently asked questions

What is CVE-2017-8144?: CVE-2017-8144 is a medium-severity vulnerability in Huawei Honor 5a, classified under Improper Restriction of Power Consumption. CVSS score: 5.5/10. Published 2017-11-22.
How severe is CVE-2017-8144?: Medium severity. CVSS v3 base score is 5.5 out of 10.