CVE-2017-15345

Vulnerability

The vulnerability exists in Huawei smartphones running software version LON-L29DC721B186 and earlier. A specially crafted 3GPP message triggers an infinite loop condition where the loop exit condition can never be reached, causing the device to become unresponsive and reboot [1].

Exploitation

An attacker with network access to the target device can send a crafted 3GPP message to exploit this vulnerability. No authentication is required, and the attacker does not need physical access to the device. The exploit involves sending the malicious message over the air interface, which then causes the baseband firmware to enter an infinite loop [1].

Impact

Successful exploitation results in a denial of service condition, causing the device to repeatedly reboot. This renders the device temporarily unusable and disrupts normal operations such as voice calls, data connectivity, and other smartphone functions. The vulnerability affects the availability of the device but does not lead to information disclosure or privilege escalation [1].

Mitigation

Huawei has released software updates to fix this vulnerability. Affected products and their resolved versions are listed in the security advisory [1]. Users are advised to upgrade to the latest firmware version for their device model. No workarounds are available, and this vulnerability is not listed on the CISA Known Exploited Vulnerabilities (KEV) catalog at the time of writing.