CVE-2017-15325
Quick assessment
Affected
Huawei Technologies Co., Ltd. Prague
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Huawei荣耀8青春版是中国华为（Huawei）公司的一款智能手机产品。Bdat driver是其中的一个Bdat驱动程序。 Huawei荣耀8青春版中的Bdat驱动程序存在整数溢出漏洞，该漏洞源于程序缺少参数检测。攻击者可通过诱使用户安装一个恶意应用并以特权执行利用该漏洞向手机驱动中发送特定参数，执行任意代码。以下版本受到影响：Huawei荣耀8青春版 Prague-AL00AC00B211之前版本，Prague-AL00BC00B211之前版本，Prague-AL00CC00B211之前版本，Pra
Possible ATT&CK Techniques 2 AI
T1210 · Exploitation of Remote Services T1190 · Exploit Public-Facing Application
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2017-15325
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
The Bdat driver of Prague smart phones with software versions earlier than Prague-AL00AC00B211, versions earlier than Prague-AL00BC00B211, versions earlier than Prague-AL00CC00B211, versions earlier than Prague-TL00AC01B211, versions earlier than Prague-TL10AC01B211 has integer overflow vulnerability due to the lack of parameter validation. An attacker tricks a user into installing a malicious APP and execute it as a specific privilege; the APP can then send a specific parameter to the driver of the smart phone, causing arbitrary code execution.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Huawei荣耀8青春版Bdat驱动程序数字错误漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Huawei荣耀8青春版是中国华为（Huawei）公司的一款智能手机产品。Bdat driver是其中的一个Bdat驱动程序。 Huawei荣耀8青春版中的Bdat驱动程序存在整数溢出漏洞，该漏洞源于程序缺少参数检测。攻击者可通过诱使用户安装一个恶意应用并以特权执行利用该漏洞向手机驱动中发送特定参数，执行任意代码。以下版本受到影响：Huawei荣耀8青春版 Prague-AL00AC00B211之前版本，Prague-AL00BC00B211之前版本，Prague-AL00CC00B211之前版本，Pra
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Huawei Technologies Co., Ltd. | Prague | Versions earlier than Prague-AL00AC00B211, Versions earlier than Prague-AL00BC00B211, Versions earlier than Prague-AL00CC00B211, Versions earlier than Prague-TL00AC01B211, Versions earlier than Prague-TL10AC01B211 | - |
|
II. Public POCs for CVE-2017-15325
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2017-15325
请登录查看更多情报信息。