CVE-2017-8150
CVE-2017-8150
Vexday Risk Score
3Baixo
Decisão SSVC (CISA)
Track
Sem sinal de exploração → monitorar
CVSS —EPSS 1.0%KEV nãoPoC —Nuclei —Metasploit —Patch —
Ciclo de vida
22 nov 2017Publicada no NVD
Recomendação: Monitorar — sem sinal de exploração no momento.
The boot loaders of P10 and P10 Plus Huawei mobile phones with software the versions before Victoria-L09AC605B162, the versions before Victoria-L29AC605B162, the versions before Vicky-L29AC605B162 have an arbitrary memory write vulnerability due to the lack of parameter validation. An attacker with the root privilege of an Android system may trick a user into installing a malicious APP. The APP can modify specific data to cause arbitrary memory writing in the next system reboot, causing continuous system reboot or arbitrary code execution.
Produtos afetados
Huawei Technologies Co., Ltd. · P10, P10 PlusQuer saber se a sua infraestrutura está exposta a isto?
Falar com a TrueHacking →