CVE-2017-8144

highpriority · track · 22EPSS 0.005 · 46 %ileEUUS

grimoire priorityP2 · Scheduled

Exploitable?

—

no known exploitation

Likely / severe?

0.55% (46th) EPSS

CVSS 7.1 · high

Is it mine?

10 products

Check your exposure

Who says so?

3 sources

cnnvd · enisa_euvd · nvd

EPSS · scored 2026-10-27

Honor 5A,Honor 8 Lite,Mate9,Mate9 Pro,P10,P10 Plus Huawei smartphones with software the versions before CAM-L03C605B143CUSTC605D003,the versions before Prague-L03C605B161,the versions before Prague-L23C605B160,the versions before MHA-AL00C00B225,the versions before LON-AL00C00B225,the versions before VTR-AL00C00B167,the versions before VTR-TL00C01B167,the versions before VKY-AL00C00B167,the versions before VKY-TL00C01B167 have a resource exhaustion vulnerability due to configure setting. An attacker tricks a user into installing a malicious application, the application may turn on the device flash-light and rapidly drain the device battery.

cvss

Technical severity, 0–10. One row per scoring source.

7.1

010

base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · medium–high · 5.1–7.1

v2.07.1highAV:N/AC:M/Au:N/C:N/I:N/A:Cprimary · NVD / NIST USexploitability 8.6 · impact 6.9

v3.05.5mediumCVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:Hprimary · NVD / NIST USexploitability 1.8 · impact 3.6

v3.05.1mediumCVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:Usecondary · CVSS-BT (t0sche)

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-920USprimary

affected products (10)

Products and version ranges known to be affected.

Huawei Technologies Co., Ltd. Honor 5A,Honor 8 Lite,Mate9,Mate9 Pro,P10,P10 Plus≤ The versions before CAM-L03C605B143CUSTC605D003,The versions before Prague-L03C605B161,The versions before Prague-L23C605B160,The versions before MHA-AL00C00B225,The versions before LON-AL00C00B225,The versions before VTR-AL00C00B167,The versions before VTR-TL00C01B167,The versions before VKY-AL00C00B167,The versions before VKY-TL00C01B167enisa_euvdEU
huawei honor 5a firmware< cam-l03c605b143custc605d003nvdUScpe:2.3:o:huawei:honor_5a_firmware:*:*:*:*:*:*:*:*
huawei honor 8 lite firmware< prague-l03c605b161nvdUScpe:2.3:o:huawei:honor_8_lite_firmware:*:*:*:*:*:*:*:*
huawei honor 8 lite firmware< prague-l23c605b160nvdUScpe:2.3:o:huawei:honor_8_lite_firmware:*:*:*:*:*:*:*:*
huawei mate 9 firmware< mha-al00c00b225nvdUScpe:2.3:o:huawei:mate_9_firmware:*:*:*:*:*:*:*:*
huawei mate 9 pro firmware< lon-al00c00b225nvdUScpe:2.3:o:huawei:mate_9_pro_firmware:*:*:*:*:*:*:*:*
huawei p10 firmware< vtr-al00c00b167nvdUScpe:2.3:o:huawei:p10_firmware:*:*:*:*:*:*:*:*
huawei p10 firmware< vtr-tl00c01b167nvdUScpe:2.3:o:huawei:p10_firmware:*:*:*:*:*:*:*:*
huawei p10 plus firmware< vky-al00c00b167nvdUScpe:2.3:o:huawei:p10_plus_firmware:*:*:*:*:*:*:*:*
huawei p10 plus firmware< vky-tl00c01b167nvdUScpe:2.3:o:huawei:p10_plus_firmware:*:*:*:*:*:*:*:*

also known as (3)

Other names and identifiers for this entity.

sources

Which sources assert this record, and when.

cnnvd enisa_euvd nvd NVD CVE.org MITRE

published 2017-11-22modified 2026-06-17

related (4)

Related entries.

ID	severity	EPSS	exploitable	published
CVE-2020-35553US	high7.5	0.44% (38th)	—	2020-12-18
An issue was discovered on Samsung mobile devices with Q(10.0) and R(11.0) (Qualcomm SM8250 chipsets) software. They allows attackers to cause a denial of service (unlock failure)…
CVE-2017-12714US	medium6.5	0.63% (50th)	—	2018-04-25
Abbott Laboratories pacemakers manufactured prior to Aug 28, 2017 do not restrict or limit the number of correctly formatted "RF wake-up" commands that can be received, which may a…
CVE-2026-64143US	medium5.5	0.14% (4th)	—	2026-07-19
In the Linux kernel, the following vulnerability has been resolved: platform/x86: uniwill-laptop: Do not enable the charging limit even when forced It seems that on some older mo…
CVE-2023-52832US	—OT elevated	1.26% (70th)	—	2024-05-21
In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: don't return unset power in ieee80211_get_tx_power() We can get a UBSAN warning if ieee80211_g…

references (4)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan