CVE-2017-2694

The AlarmService component in HwVmall with software earlier than 1.5.2.0 versions has no control over calling permissions, allowing any third party to call

published November 22, 2017

CVSS
—
EPSS
1%
Percentile
43.3
In the wild
Unconfirmed
What it is

The AlarmService component in HwVmall with software earlier than 1.5.2.0 versions has no control over calling permissions, allowing any third party to call. An attacker can construct a malicious application to call it. Consequently, alert music will be played suddenly, compromising user experience.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00519 · 43.3th percentile
Published
2017-11-22T19:00Z
EPSS history
Timeline
  • 22 NOV 19:00Z
    The AlarmService component in HwVmall with software earlier than 1.5.2.0 versions has no control over calling permissions, allowing any third party to call
    cvelistv5