CVE-2017-2694

3.3 lowEPSS 0.5%

Low (3.3) in huawei vmall. EPSS 0.5% chance of exploitation in the next 30 days.

The AlarmService component in HwVmall with software earlier than 1.5.2.0 versions has no control over calling permissions, allowing any third party to call. An attacker can construct a malicious application to call it. Consequently, alert music will be played suddenly, compromising user experience.

Severity

CVSS 3.0

3.3 low

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

EPSS: 0.5% chance of exploitation in the next 30 days; higher than 44% of CVEs (scores of 2026-11-01)
CWE: CWE-275
Published: 2017-11-22
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

huawei:vmall

References

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170125-01-vmall-en
http://www.securityfocus.com/bid/95915
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170125-01-vmall-en
http://www.securityfocus.com/bid/95915

Check your stack JSON