CVE-2017-15322

Severity: medium (CVSS 6.5 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2017-12-22 · updated 2026-06-17
Weakness: CWE-20

Description

Some Huawei smartphones with software of BGO-L03C158B003CUSTC158D001 and BGO-L03C331B009CUSTC331D001 have a DoS vulnerability due to insufficient input validation. An attacker could exploit this vulnerability by sending specially crafted NFC messages to the target device. Successful exploit could make a service crash.

Affected products

Huawei Technologies Co., Ltd. Baggio-L03A: bgo-l03c158b003custc158d001, bgo-l03c331b009custc331d001

References

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171108-01-nfc-en
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171108-01-nfc-en

Get alerted when CVE-2017-15322 or the next vulnerability affects your stack