CVE-2017-2709

{"id": "CVE-2017-2709", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 4.3, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "MEDIUM", "availabilityImpact": "PARTIAL", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 8.6, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": true}], "cvssMetricV30": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.0", "baseScore": 5.5, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 1.8}]}, "published": "2017-11-22T19:29:00.897", "references": [{"url": "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170913-01-appdos-en", "tags": ["Vendor Advisory"], "source": "psirt@huawei.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-20"}]}], "descriptions": [{"lang": "en", "value": "HiGame with software earlier than 7.3.0 versions, SkyTone with software earlier than 8.1.1 versions have a DoS Vulnerability. An attacker tricks a user into installing a malicious application on the smart phone, the attacker can send malformed packets to the device. Due to the lack of adequate input validation of APPs, which causes the APPs Denial of Service."}, {"lang": "es", "value": "HiGame con software en versiones anteriores a la 7.3.0 y SkyTone con software en versiones anteriores a la 8.1.1 tienen una vulnerabilidad de denegaci\u00f3n de servicio. Un atacante enga\u00f1a a un usuario para que instale una aplicaci\u00f3n maliciosa en el smartphone, permitiendo que el atacante env\u00ede paquetes mal formados al dispositivo. Esto se debe a una falta de validaci\u00f3n de entradas adecuada de las APP, lo que provoca la denegaci\u00f3n de servicio de las APP."}], "lastModified": "2017-12-12T17:13:55.680", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:huawei:higame:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "14C1785D-B40B-47D4-8098-2DE3CC5B7978", "versionEndExcluding": "7.3.0"}], "operator": "OR"}]}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:huawei:skytone:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "392B6B1E-30A9-4965-83D2-9F19B1960A6C", "versionEndExcluding": "8.1.1"}], "operator": "OR"}]}], "sourceIdentifier": "psirt@huawei.com"}