CVE-2017-2694

EPSS 0.5%

Vexday Risk Score

3Baixo

Decisão SSVC (CISA)

Track

Sem sinal de exploração → monitorar

CVSS —EPSS 0.5%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

22 nov 2017Publicada no NVD

Recomendação: Monitorar — sem sinal de exploração no momento.

The AlarmService component in HwVmall with software earlier than 1.5.2.0 versions has no control over calling permissions, allowing any third party to call. An attacker can construct a malicious application to call it. Consequently, alert music will be played suddenly, compromising user experience.

Produtos afetados

Huawei Technologies Co., Ltd. · HwVmall

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →

Referências

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170125-01-vmall-en http://www.securityfocus.com/bid/95915