PT-2017-18191
CVE-2017-8186
·
Published
2017-11-22
·
Updated
2017-12-11
Description by
CVSS 2.0
7.1
HighMetricsAV:N/AC:M/Au:N/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions
Huawei mobile phones with software earlier than MHA-AL00BC00B231
Description
The issue is related to a lack of parameter validation, which can lead to a denial-of-service (DOS) condition. An attacker could potentially trick a user into installing a malicious application (APP) that modifies specific parameters to cause the system to reboot.
Recommendations
For versions earlier than MHA-AL00BC00B231, consider restricting the installation of applications from untrusted sources to minimize the risk of exploitation. As a temporary workaround, avoid using applications that request modification of system parameters until a patch is available.
Found an issue in the description? Have something to add? Feel free to write us 👾