What’s Vulnerable › Vulnerabilities

CVE-2017-17224

• Severity: high (CVSS 8.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2019-11-12 · updated 2026-06-17
• Weakness: CWE-476

Description

Some Huawei smart phones with versions earlier than Harry-AL00C 9.1.0.206(C00E205R3P1) have a null pointer dereference vulnerability. An attacker crafts specific packets and sends to the affected product to exploit this vulnerability. Successful exploitation may cause the affected phone abnormal.

Affected products

• Huawei HG655m: before harry-al00c_9.1.0.206\(c00e205r3p1\); before v100r001c02b023 — fixed in harry-al00c_9.1.0.206\(c00e205r3p1\), v100r001c02b023

How to fix

Upgrade to a fixed version: Huawei HG655m harry-al00c_9.1.0.206\(c00e205r3p1\), v100r001c02b023. Check the vendor advisory for mitigations.

References

• http://www.huawei.com/en/psirt/security-notices/huawei-sn-20180327-01-hg655m-en
• https://fortiguard.com/zeroday/FG-VD-18-017
• http://www.huawei.com/en/psirt/security-notices/huawei-sn-20180327-01-hg655m-en
• https://fortiguard.com/zeroday/FG-VD-18-017

Get alerted when CVE-2017-17224 or the next vulnerability affects your stack