Improper input validation in Huawei Eva-Al10
CVE-2017-8164
Some Huawei smart phones with software EVA-L09C34B142; EVA-L09C40B196; EVA-L09C432B210; EVA-L09C440B138; EVA-L09C464B150; EVA-L09C530B127; EVA-L09C55B190; EVA-L09C576B150; EVA-L09C635B221; EVA-L09C636B193; EVA-L09C675B130; EVA-L09C688B143; EVA-L09C703B160; EVA-L09C706B145; EVA-L09GBRC555B171; EVA-L09IRLC368B160; EVA-L19C10B190; EVA-L19C185B220; EVA-L19C20B160; EVA-L19C432B210; EVA-L19C636B190; EVA-L29C20B160; EVA-L29C636B191; EVA-TL00C01B198; VIE-L09C02B131; VIE-L09C109B181; VIE-L09C113B170; VIE-L09C150B170; VIE-L09C25B120; VIE-L09C40B181; VIE-L09C432B181; VIE-L09C55B170; VIE-L09C605B131; VIE-L09ITAC555B130; VIE-L29C10B170; VIE-L29C185B181; VIE-L29C605B131; VIE-L29C636B202 have a denial of service (DoS) vulnerability. An attacker can trick a user to install a malicious application to exploit this vulnerability. Successful exploitation can cause camera application unusable.
Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)
EPSS: 0.005 (42.8th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 3.3 (Low). Vector: CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L.
Affected products
- Huawei Eva-al10
- Huawei Eva-al10_firmware — versions eva-al10c00b198
- Huawei Eva-cl00
- Huawei Eva-cl00_firmware — versions eva-cl00c92b198
- Huawei Eva-dl00
- Huawei Eva-dl00_firmware — versions eva-dl00c17b198
- Huawei Eva-l09
- Huawei Eva-l09_firmware — versions eva-l09c02b143, eva-l09c09b150, eva-l09c22b140
- Huawei Eva-l19
- Huawei Eva-l19_firmware — versions eva-l19c10b190, eva-l19c20b160, eva-l19c185b220
Weakness classification (CWE)
References
- psirt@huawei.com (x_refsource_CONFIRM, Vendor Advisory)
Frequently asked questions
- What is CVE-2017-8164?
- CVE-2017-8164 is a low-severity vulnerability in Huawei Eva-Al10, classified under Improper Input Validation. CVSS score: 3.3/10. Published 2018-03-05.
- How severe is CVE-2017-8164?
- Low severity. CVSS v3 base score is 3.3 out of 10.