ByteOS Network

CVE Vulnerability Details :

CVE-2017-2694

PUBLISHED

More Info Official Page

Assigner-huawei

Assigner Org ID-25ac1063-e409-4190-8079-24548c77ea2e

Published At-22 Nov, 2017 | 19:00

Updated At-17 Sep, 2024 | 02:01

▼CVE Numbering Authority (CNA)

The AlarmService component in HwVmall with software earlier than 1.5.2.0 versions has no control over calling permissions, allowing any third party to call. An attacker can construct a malicious application to call it. Consequently, alert music will be played suddenly, compromising user experience.

Affected Products

Vendor

Huawei Technologies Co., Ltd.

Product

HwVmall

Versions

Affected

Earlier than HwVmall 1.5.2.0 versions

Problem Types

Type	CWE ID	Description
text	N/A	Improper Permission Control

References

Hyperlink	Resource
http://www.securityfocus.com/bid/95915	vdb-entry x_refsource_BID
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170125-01-vmall-en	x_refsource_CONFIRM

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
http://www.securityfocus.com/bid/95915	vdb-entry x_refsource_BID x_transferred
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170125-01-vmall-en	x_refsource_CONFIRM x_transferred

Affected Products

Affected

Problem Types

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References

Affected Products

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References