Vulnerability Database

290,020

Total vulnerabilities in the database

CVE-2017-8144

Honor 5A,Honor 8 Lite,Mate9,Mate9 Pro,P10,P10 Plus Huawei smartphones with software the versions before CAM-L03C605B143CUSTC605D003,the versions before Prague-L03C605B161,the versions before Prague-L23C605B160,the versions before MHA-AL00C00B225,the versions before LON-AL00C00B225,the versions before VTR-AL00C00B167,the versions before VTR-TL00C01B167,the versions before VKY-AL00C00B167,the versions before VKY-TL00C01B167 have a resource exhaustion vulnerability due to configure setting. An attacker tricks a user into installing a malicious application, the application may turn on the device flash-light and rapidly drain the device battery.

  • Published: Nov 22, 2017
  • Updated: Apr 13, 2023
  • CVE: CVE-2017-8144
  • Severity: Medium
  • Exploit:

CVSS v3:

  • Severity: Medium
  • Score: 5.5
  • AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

CVSS v2:

  • Severity: High
  • Score: 7.1
  • AV:N/AC:M/Au:N/C:N/I:N/A:C

CWEs:

Software From Fixed in
huawei / honor_5a_firmware - cam-l03c605b143custc605d003
huawei / honor_8_lite_firmware - prague-l03c605b161
huawei / honor_8_lite_firmware - prague-l23c605b160
huawei / mate_9_firmware - mha-al00c00b225
huawei / mate_9_pro_firmware - lon-al00c00b225
huawei / p10_firmware - vtr-al00c00b167
huawei / p10_firmware - vtr-tl00c01b167
huawei / p10_plus_firmware - vky-al00c00b167
huawei / p10_plus_firmware - vky-tl00c01b167