2 lines
3.9 KiB
JSON
2 lines
3.9 KiB
JSON
{"affected":[{"affectedData":[{"product":"honor 8 Pro","vendor":"Huawei Technologies Co., Ltd.","versions":[{"status":"affected","version":"Duke-L09C10B120 and earlier versions,Duke-L09C432B120 and earlier versions,Duke-L09C636B120 and earlier versions,"}]}],"source":"psirt@huawei.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:huawei:honor_8_pro_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"B8F0EC61-EEE3-4F09-8715-90E7E3DA92EF","versionEndIncluding":"duke-l09c10b120","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:huawei:honor_8_pro:-:*:*:*:*:*:*:*","matchCriteriaId":"77FAD273-D46F-43B9-AC4E-BA1B61F16078","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:huawei:honor_8_pro_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"7F99BBD3-84D9-4907-8DAD-A7546C37A2A9","versionEndIncluding":"duke-l09c432b120","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:huawei:honor_8_pro:-:*:*:*:*:*:*:*","matchCriteriaId":"77FAD273-D46F-43B9-AC4E-BA1B61F16078","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:huawei:honor_8_pro_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"7FE35DDA-303B-4CAE-93F9-F50AA159EA5B","versionEndIncluding":"duke-l09c636b120","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:huawei:honor_8_pro:-:*:*:*:*:*:*:*","matchCriteriaId":"77FAD273-D46F-43B9-AC4E-BA1B61F16078","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"}],"cveTags":[],"descriptions":[{"lang":"en","value":"honor 8 Pro with software Duke-L09C10B120 and earlier versions,Duke-L09C432B120 and earlier versions,Duke-L09C636B120 and earlier versions has an integer overflow vulnerability. The attacker sends a response message to the device, which contains an illegal length field, it could produce an integer overflow and restart the modem system."},{"lang":"es","value":"Honor 8 Pro con software Duke-L09C10B120 y anteriores, Duke-L09C432B120 y anteriores y Duke-L09C636B120 y anteriores tiene una vulnerabilidad de desbordamiento de enteros. El atacante envía un mensaje de respuesta al dispositivo, que contiene un campo length ilegal. Esto podría provocar un desbordamiento de enteros y reiniciar el sistema de módem."}],"id":"CVE-2017-2717","lastModified":"2026-06-17T01:16:43.990","metrics":{"cvssMetricV2":[{"acInsufInfo":false,"baseSeverity":"LOW","cvssData":{"accessComplexity":"LOW","accessVector":"ADJACENT_NETWORK","authentication":"NONE","availabilityImpact":"PARTIAL","baseScore":3.3,"confidentialityImpact":"NONE","integrityImpact":"NONE","vectorString":"AV:A/AC:L/Au:N/C:N/I:N/A:P","version":"2.0"},"exploitabilityScore":6.5,"impactScore":2.9,"obtainAllPrivilege":false,"obtainOtherPrivilege":false,"obtainUserPrivilege":false,"source":"nvd@nist.gov","type":"Primary","userInteractionRequired":false}],"cvssMetricV30":[{"cvssData":{"attackComplexity":"LOW","attackVector":"ADJACENT_NETWORK","availabilityImpact":"HIGH","baseScore":6.5,"baseSeverity":"MEDIUM","confidentialityImpact":"NONE","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","version":"3.0"},"exploitabilityScore":2.8,"impactScore":3.6,"source":"nvd@nist.gov","type":"Primary"}]},"published":"2017-11-22T19:29:01.223","references":[{"source":"psirt@huawei.com","tags":["Vendor Advisory"],"url":"http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170816-01-nas-en"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"url":"http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170816-01-nas-en"}],"sourceIdentifier":"psirt@huawei.com","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"CWE-190"}],"source":"nvd@nist.gov","type":"Primary"}]}
|