← Back

CVE-2017-2699

nvd nist
Published: Nov 22, 2017Modified: May 13, 2026

JSON object

Loading...
7.8
Vector
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Exploitability: 1.8 / Impact: 5.9
Source: NVD

Description

The Huawei Themes APP in versions earlier than PLK-UL00C17B385, versions earlier than CRR-L09C432B380, versions earlier than LYO-L21C577B128 has a privilege elevation vulnerability. An attacker could exploit this vulnerability to upload theme packs containing malicious files and trick users into installing the theme packets, resulting in the execution of arbitrary code.

Affected (3)

Huawei
3 products
Honor 7 Firmware
Mate S Firmware
Lyo L21 Firmware
Configuration A
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Honor 7 Firmware
Before plk-ul00c17b385
Running on/withPlatform Versions
Huawei
Honor 7
All versions
Configuration B
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Mate S Firmware
Before crr-l09c432b380
Running on/withPlatform Versions
Huawei
Mate S
All versions
Configuration C
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Lyo L21 Firmware
Before lyo-l21c577b128
Running on/withPlatform Versions
Huawei
Lyo L21
All versions

Related CWEs

CWE-434
Unrestricted Upload of File with Dangerous Type
The product allows the upload or transfer of dangerous file types that are automatically processed within its environment.

References (4)

Source: psirt@huawei.com
Vendor Advisory
Source: psirt@huawei.com
Third Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryVDB Entry

Timeline

No history available yet.