VYPR
Unrated severityNVD Advisory· Published Jul 2, 2018· Updated Aug 5, 2024

CVE-2017-17175

CVE-2017-17175

Description

Short Message Service (SMS) module of Mate 9 Pro Huawei smart phones with the versions before LON-AL00B 8.0.0.354(C00) has a Denial of Service (DoS) vulnerability. An unauthenticated attacker may set up a pseudo base station, and send special malware text message to the phone, causing the mobile phone to fail to make calls and send and receive text messages.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

A DoS vulnerability in the SMS module of Huawei Mate 9 Pro allows an unauthenticated attacker to disrupt call and messaging services via a specially crafted text message from a pseudo base station.

Vulnerability

The Short Message Service (SMS) module of Huawei Mate 9 Pro smartphones running versions before LON-AL00B 8.0.0.354(C00) contains a Denial of Service (DoS) vulnerability. An unauthenticated attacker can exploit this by setting up a pseudo base station and sending a specially crafted malware text message to the target device, causing the phone to fail to make calls and send or receive text messages [1].

Exploitation

To exploit this vulnerability, an attacker must have the capability to set up a pseudo base station within range of the target device. No authentication is required. The attacker then sends a specially crafted text message that triggers the DoS condition in the SMS module, disrupting normal telephony and messaging functions [1].

Impact

Successful exploitation results in a Denial of Service (DoS) where the affected Huawei Mate 9 Pro phone becomes unable to make calls or send and receive text messages. This impacts the availability of core communication services [1].

Mitigation

Huawei has released a software update to fix this vulnerability. Users should upgrade their Mate 9 Pro to version LON-AL00B 8.0.0.354(C00) or later. The advisory was published on 2018-06-29 [1]. No workarounds are documented.

AI Insight generated on May 26, 2026. Synthesized from this CVE's description and the cited reference URLs; citations are validated against the source bundle.

Affected products

2
  • Range: <8.0.0.354(C00)
  • Huawei Technologies Co., Ltd./Mate 9 Prov5
    Range: The versions before LON-AL00B 8.0.0.354(C00)

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

1

News mentions

0

No linked articles in our index yet.