CVE-2017-2731

MEDIUM

Huawei P9 Plus Firmware < VIE-AL10C00B386 - Denial of Service via Vibrator Service Interface

Title source: llm

Description

The vibrator service in P9 Plus smart phones with software versions earlier before VIE-AL10C00B386 has DoS vulnerability. An attacker can tricks a user into installing a malicious application on the smart phone, and send given parameter to smart phone vibrator service interface to crash the system.

References (1)

Core 1

Core References

Vendor Advisory x_refsource_confirm

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170315-01-smartphone-en

Scores

CVSS v3 5.5

EPSS 0.0007

EPSS Percentile 21.2%

Attack Vector LOCAL

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Details

CWE

CWE-20

Status published

Products (2)

huawei/p9_plus_firmware < vie-al10c00b386

Huawei Technologies Co., Ltd./P9 Plus Versions earlier before VIE-AL10C00B386

Published Nov 22, 2017

Tracked Since Feb 18, 2026