Improper input validation in Huawei…
Priority LOW 26CWE-20Published · Updated
Key facts
- Attack vector
- Local
- Privileges required
- None
- User interaction
- Required
- Attack complexity
- Low
- Impact type
- —
- Confidentiality · integrity · availability
- None · None · High
- Fix status
- No fix listed
Attack profile from CVSS 3.0 · NVD. Fix status from CNA.
Summary
Some huawei smartphones with software BTV-DL09C233B350, Berlin-L21HNC432B360, Berlin-L22HNC636B360, Berlin-L24HNC567B360, Berlin-L21C10B130, Berlin-L21C185B132, Berlin-L21C464B130, Berlin-L22C346B140, Berlin-L22C636B160, Berlin-L23C605B131, Berlin-L23DOMC109B160, MHA-AL00AC00B125 have a DoS vulnerability. Due to insufficient input validation, an attacker could trick a user to execute a malicious application, which could be exploited by attacker to launch DoS attacks.
Why it matters now
EPSS 0.0054 45th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Huawei | BTV-EMUI5.0,Berlin-EMUI5.0,Berlin-L21,Berlin-L22,Berlin-L23,MHA-AL00A | BTV-DL09C233B350, Berlin-L21HNC432B360, Berlin-L22HNC636B360, Berlin-L24HNC567B360, Berlin-L21C10B130, Berlin-L21C185B132, Berlin-L21C464B130, Berlin-L22C346B140, Berlin-L22C636B160, Berlin-L23C605B131, Berlin-L23DOMC109B160, MHA-AL00AC00B125 | — | No fix listed | CNA |
- BTV-EMUI5.0,Berlin-EMUI5.0,Berlin-L21,Berlin-L22,Berlin-L23,MHA-AL00A VendorHuawei Affected BTV-DL09C233B350, Berlin-L21HNC432B360, Berlin-L22HNC636B360, Berlin-L24HNC567B360, Berlin-L21C10B130, Berlin-L21C185B132, Berlin-L21C464B130, Berlin-L22C346B140, Berlin-L22C636B160, Berlin-L23C605B131, Berlin-L23DOMC109B160, MHA-AL00AC00B125 Fixed in — No fix listed CNA
CPE configurations NVD · 18
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:huawei:btv-emui5.0_firmware:btv-dl09c233b350:*:*:*:*:*:*:* | btv-dl09c233b350 | Vulnerable | Huawei |
| cpe:2.3:h:huawei:btv-emui5.0:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Huawei |
| cpe:2.3:o:huawei:berlin-emui5.0_firmware:berlin-l21hnc432b360:*:*:*:*:*:*:* | berlin-l21hnc432b360 | Vulnerable | Huawei |
| cpe:2.3:o:huawei:berlin-emui5.0_firmware:berlin-l22hnc636b360:*:*:*:*:*:*:* | berlin-l22hnc636b360 | Vulnerable | Huawei |
| cpe:2.3:o:huawei:berlin-emui5.0_firmware:berlin-l24hnc567b360:*:*:*:*:*:*:* | berlin-l24hnc567b360 | Vulnerable | Huawei |
| cpe:2.3:h:huawei:berlin-emui5.0:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Huawei |
| cpe:2.3:o:huawei:berlin-l21_firmware:berlin-l21c10b130:*:*:*:*:*:*:* | berlin-l21c10b130 | Vulnerable | Huawei |
| cpe:2.3:o:huawei:berlin-l21_firmware:berlin-l21c185b132:*:*:*:*:*:*:* | berlin-l21c185b132 | Vulnerable | Huawei |
| cpe:2.3:o:huawei:berlin-l21_firmware:berlin-l21c464b130:*:*:*:*:*:*:* | berlin-l21c464b130 | Vulnerable | Huawei |
| cpe:2.3:h:huawei:berlin-l21:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Huawei |
- cpe:2.3:o:huawei:btv-emui5.0_firmware:btv-dl09c233b350:*:*:*:*:*:*:* Versions btv-dl09c233b350 Vulnerable ·Huawei
- cpe:2.3:h:huawei:btv-emui5.0:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei
- cpe:2.3:o:huawei:berlin-emui5.0_firmware:berlin-l21hnc432b360:*:*:*:*:*:*:* Versions berlin-l21hnc432b360 Vulnerable ·Huawei
- cpe:2.3:o:huawei:berlin-emui5.0_firmware:berlin-l22hnc636b360:*:*:*:*:*:*:* Versions berlin-l22hnc636b360 Vulnerable ·Huawei
- cpe:2.3:o:huawei:berlin-emui5.0_firmware:berlin-l24hnc567b360:*:*:*:*:*:*:* Versions berlin-l24hnc567b360 Vulnerable ·Huawei
- cpe:2.3:h:huawei:berlin-emui5.0:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei
- cpe:2.3:o:huawei:berlin-l21_firmware:berlin-l21c10b130:*:*:*:*:*:*:* Versions berlin-l21c10b130 Vulnerable ·Huawei
- cpe:2.3:o:huawei:berlin-l21_firmware:berlin-l21c185b132:*:*:*:*:*:*:* Versions berlin-l21c185b132 Vulnerable ·Huawei
- cpe:2.3:o:huawei:berlin-l21_firmware:berlin-l21c464b130:*:*:*:*:*:*:* Versions berlin-l21c464b130 Vulnerable ·Huawei
- cpe:2.3:h:huawei:berlin-l21:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei
Show 8 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:huawei:berlin-l22_firmware:berlin-l22c346b140:*:*:*:*:*:*:* | berlin-l22c346b140 | Vulnerable | Huawei |
| cpe:2.3:o:huawei:berlin-l22_firmware:berlin-l22c636b160:*:*:*:*:*:*:* | berlin-l22c636b160 | Vulnerable | Huawei |
| cpe:2.3:h:huawei:berlin-l22:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Huawei |
| cpe:2.3:o:huawei:berlin-l23_firmware:berlin-l23c605b131:*:*:*:*:*:*:* | berlin-l23c605b131 | Vulnerable | Huawei |
| cpe:2.3:o:huawei:berlin-l23_firmware:berlin-l23domc109b160:*:*:*:*:*:*:* | berlin-l23domc109b160 | Vulnerable | Huawei |
| cpe:2.3:h:huawei:berlin-l23:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Huawei |
| cpe:2.3:o:huawei:mha-al00a_firmware:mha-al00ac00b125:*:*:*:*:*:*:* | mha-al00ac00b125 | Vulnerable | Huawei |
| cpe:2.3:h:huawei:mha-al00a:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Huawei |
- cpe:2.3:o:huawei:berlin-l22_firmware:berlin-l22c346b140:*:*:*:*:*:*:* Versions berlin-l22c346b140 Vulnerable ·Huawei
- cpe:2.3:o:huawei:berlin-l22_firmware:berlin-l22c636b160:*:*:*:*:*:*:* Versions berlin-l22c636b160 Vulnerable ·Huawei
- cpe:2.3:h:huawei:berlin-l22:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei
- cpe:2.3:o:huawei:berlin-l23_firmware:berlin-l23c605b131:*:*:*:*:*:*:* Versions berlin-l23c605b131 Vulnerable ·Huawei
- cpe:2.3:o:huawei:berlin-l23_firmware:berlin-l23domc109b160:*:*:*:*:*:*:* Versions berlin-l23domc109b160 Vulnerable ·Huawei
- cpe:2.3:h:huawei:berlin-l23:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei
- cpe:2.3:o:huawei:mha-al00a_firmware:mha-al00ac00b125:*:*:*:*:*:*:* Versions mha-al00ac00b125 Vulnerable ·Huawei
- cpe:2.3:h:huawei:mha-al00a:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2017-17201
- 2026-10-03 Alias added: GHSA-8867-wc5p-w5q4
References
Sources
- CVE-2017-17201 · CVE Program
- CVE-2017-17201 · NVD
- FIRST EPSS
- GHSA-8867-wc5p-w5q4 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences