CVE-2017-17158

N/A
Published: May 24, 2018 at 02:00 PM UTC
Updated: June 17, 2026 at 01:10 AM UTC
14 products affected across 1 vendorPrague AL00A FirmwarePrague TL00A FirmwarePrague TL10A Firmware

Using Berlin-L21HN; Prague-AL00A; Prague-AL00B; Prague-AL00C; Prague-L31; Prague-TL00A; Prague-TL10A by Huawei Technologies Co., Ltd.?

Get instant alerts when new vulnerabilities affect Berlin-L21HN; Prague-AL00A; Prague-AL00B; Prague-AL00C; Prague-L31; Prague-TL00A; Prague-TL10A - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Severity
N/A
Exploit prediction
EPSS 0.3%

Description

Some Huawei smart phones with the versions before Berlin-L21HNC185B381; the versions before Prague-AL00AC00B223; the versions before Prague-AL00BC00B223; the versions before Prague-AL00CC00B223; the versions before Prague-L31C432B208; the versions before Prague-TL00AC01B223; the versions before Prague-TL00AC01B223 have an information exposure vulnerability. When the user's smart phone connects to the malicious device for charging, an unauthenticated attacker may activate some specific function by sending some specially crafted messages. Due to insufficient input validation of the messages, successful exploit may cause information exposure.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

v < l21hnc185b381
Affected range stops below l21hnc185b381, so it looks safe — our inference, not a vendor statement
huawei-berlin-l21hn (same device)
v < al00ac00b223
Affected range stops below al00ac00b223, so it looks safe — our inference, not a vendor statement
huawei-prague-al00a (same device)
v < al00bc00b223
Affected range stops below al00bc00b223, so it looks safe — our inference, not a vendor statement
huawei-prague-al00b (same device)
v < al00cc00b223
Affected range stops below al00cc00b223, so it looks safe — our inference, not a vendor statement
huawei-prague-al00c (same device)
v < l31c432b208
Affected range stops below l31c432b208, so it looks safe — our inference, not a vendor statement
huawei-prague-l31 (same device)
v < tl00ac01b223
Affected range stops below tl00ac01b223, so it looks safe — our inference, not a vendor statement
huawei-prague-tl00a (same device)
v < tl00ac01b223
Affected range stops below tl00ac01b223, so it looks safe — our inference, not a vendor statement
huawei-prague-tl10a (same device)

Remediation

No guide yet

No remediation guidance has been written for this CVE yet. What the record does show:

CVSS

Confidentiality
PARTIAL
Integrity
NONE
Availability
NONE
Vector?

Quick Info

StatusMODIFIED
CWE
CWE-20

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Free plan, no card