CVE-2017-17159

Severity: medium (CVSS 6.5 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2018-02-15 · updated 2026-06-17
Weakness: CWE-20

Description

Some Huawei smart phones with software of NXT-AL10C00B386, NXT-CL00C92B386, NXT-DL00C17B386, NXT-TL00C01B386SP01, NTS-AL00C00B535 have a DoS vulnerability due to insufficient input validation. An unauthenticated attacker could send malformed System Information(SI) messages to the smart phone within radio range by special wireless device. Successful exploit could make the smart phone restart.

Affected products

Huawei Mt8-Emui4.1 Firmware: nxt-al10c00b386, nxt-cl00c92b386, nxt-dl00c17b386, nxt-tl00c01b386sp01
Huawei Nts-Al00 Firmware: nts-al00c00b535

References

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171220-02-smartphone-en
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171220-02-smartphone-en

Get alerted when CVE-2017-17159 or the next vulnerability affects your stack