« Volver al listado

CVE-2017-15322

Estado: ModificadaMedia (6.5)—

Algunos smartphones Huawei con software de BGO-L03C158B003CUSTC158D001 y BGO-L03C331B009CUSTC331D001 contienen una vulnerabilidad de DoS debida a una validación de entradas insuficiente. Un atacante podría explotar esta vulnerabilidad mediante el envío de mensajes NFC especialmente manipulados al dispositivo objetivo. Una explotación exitosa podría provocar el cierre inesperado de un servicio.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Huawei — Baggio-l03a Firmware

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2017-15322",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 3.3,
          "accessVector": "ADJACENT_NETWORK",
          "vectorString": "AV:A/AC:L/Au:N/C:N/I:N/A:P",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "NONE"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "LOW",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 6.5,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV30": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.0",
          "baseScore": 6.5,
          "attackVector": "ADJACENT_NETWORK",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "integrityImpact": "NONE",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "NONE"
        },
        "impactScore": 3.6,
        "exploitabilityScore": 2.8
      }
    ]
  },
  "affected": [
    {
      "source": "psirt@huawei.com",
      "affectedData": [
        {
          "vendor": "Huawei Technologies Co., Ltd.",
          "product": "Baggio-L03A",
          "versions": [
            {
              "status": "affected",
              "version": "BGO-L03C158B003CUSTC158D001"
            },
            {
              "status": "affected",
              "version": "BGO-L03C331B009CUSTC331D001"
            }
          ]
        }
      ]
    }
  ],
  "published": "2017-12-22T17:29:13.423",
  "references": [
    {
      "url": "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171108-01-nfc-en",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "psirt@huawei.com"
    },
    {
      "url": "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171108-01-nfc-en",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-20"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Some Huawei smartphones with software of BGO-L03C158B003CUSTC158D001 and BGO-L03C331B009CUSTC331D001 have a DoS vulnerability due to insufficient input validation. An attacker could exploit this vulnerability by sending specially crafted NFC messages to the target device. Successful exploit could make a service crash."
    },
    {
      "lang": "es",
      "value": "Algunos smartphones Huawei con software de BGO-L03C158B003CUSTC158D001 y BGO-L03C331B009CUSTC331D001 contienen una vulnerabilidad de DoS debida a una validación de entradas insuficiente. Un atacante podría explotar esta vulnerabilidad mediante el envío de mensajes NFC especialmente manipulados al dispositivo objetivo. Una explotación exitosa podría provocar el cierre inesperado de un servicio."
    }
  ],
  "lastModified": "2026-06-17T01:07:35.387",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:huawei:baggio-l03a_firmware:bgo-l03c158b003custc158d001:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4EDD8D84-1203-44E2-A1EC-57B9DB028A7D"
            },
            {
              "criteria": "cpe:2.3:o:huawei:baggio-l03a_firmware:bgo-l03c331b009custc331d001:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D95F753B-C655-41E2-8A2A-3C9BA919EA2D"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:huawei:baggio-l03a:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "DCC40DA7-38EB-4A2D-A569-8FF48D84ACF1"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "sourceIdentifier": "psirt@huawei.com"
}