CVE:CVE-2017-17158
CNNVD:CNNVD-201712-315
Huawei Berlin-L21HN等都是中国华为（Huawei）公司的智能手机产品。
多款Huawei产品中存在信息泄露漏洞，该漏洞源于程序没有充分的对消息执行输入校验。当用户手机连接危险充电设备进行充电时，攻击者可通过发送特制的消息利用该漏洞开启手机特定的功能，泄露信息。以下产品和版本受到影响：Huawei Berlin-L21HN Berlin-L21HNC185B381之前版本；Prague-AL00A Prague-AL00AC00B223之前版本；Prague-AL00B Prague-AL00BC00B223之前版本；Prague-AL00C Prague-AL00CC00B223之前版本；Prague-L31 Prague-L31C432B208之前版本；Prague-TL00A Prague-TL00AC01B223之前版本；Prague-TL10A Prague-TL00AC01B223之前版本。
solution:Upgrade huawei berlin-l21hn_firmware to a higher version than l21hnc185b381,and avoid the version (,l21hnc185b381); Upgrade huawei prague-al00a_firmware to a higher version than al00ac00b223,and avoid the version (,al00ac00b223); Upgrade huawei prague-al00b_firmware to a higher version than al00bc00b223,and avoid the version (,al00bc00b223); Upgrade huawei prague-al00c_firmware to a higher version than al00cc00b223,and avoid the version (,al00cc00b223); Upgrade huawei prague-l31_firmware to a higher version than l31c432b208,and avoid the version (,l31c432b208); Upgrade huawei prague-tl00a_firmware to a higher version than tl00ac01b223,and avoid the version (,tl00ac01b223); Upgrade huawei prague-tl10a_firmware to a higher version than tl00ac01b223,and avoid the version (,tl00ac01b223)