VIR Vulnerability Intelligence Relay

CVE-2017-2694

low
Published 2017-11-22 · Modified 2026-05-13
CVSS v3
3.3
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
CVSS v2
4.3
VIR risk
3.3

Description

The AlarmService component in HwVmall with software earlier than 1.5.2.0 versions has no control over calling permissions, allowing any third party to call. An attacker can construct a malicious application to call it. Consequently, alert music will be played suddenly, compromising user experience.

Predictions

Exploit likelihood
34%
Patch ETA
—

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

vendor Authored 2026-05-27

Vendor advisory: psirt@huawei.com — http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170125-01-vmall-en

Application impact
VendorProductVersionsFixed
huaweivmall{"endExcluding":"1.5.2.0"}1.5.2.0

References

CWEs

CWE-275

Verify integrity in audit chain (admin only). AS-IS.