CVE-2017-2692

CWE-77 — Command Injection3 documents3 sources
Severity
7.8HIGH
EPSS
0.2%
top 58.84%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
8
Huawei G8 FirmwareHuawei Honor 6 FirmwareHuawei Honor 7 Firmware+5 more
Timeline
PublishedNov 22
Latest updateMay 17

Description

The Keyguard application in ALE-L02C635B140 and earlier versions,ALE-L02C636B140 and earlier versions,ALE-L21C10B150 and earlier versions,ALE-L21C185B200 and earlier versions,ALE-L21C432B214 and earlier versions,ALE-L21C464B150 and earlier versions,ALE-L21C636B200 and earlier versions,ALE-L23C605B190 and earlier versions,ALE-TL00C01B250 and earlier versions,ALE-UL00C00B250 and earlier versions,MT7-L09C605B325 and earlier versions,MT7-L09C900B339 and earlier versions,MT7-TL10C900B339 and earlier …

CVSS vector

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Affected Packages8 packages

▶NVDhuawei/g8_firmwarerio-al00c00b220+3
▶NVDhuawei/p8_firmwaregra-cl00c92b230+5
▶NVDhuawei/shotx_firmwareath-al00c92b200+6
▶NVDhuawei/mate_7_firmwaremt7-l09c605b325+2
▶NVDhuawei/mate_s_firmwarecrr-cl00c92b172+4

🔴Vulnerability Details

2
GHSA
GHSA-4fhx-2p3m-rp8w: The Keyguard application in ALE-L02C635B140 and earlier versions,ALE-L02C636B140 and earlier versions,ALE-L21C10B150 and earlier versions,ALE-L21C185B↗2022-05-17
▶
CVEList
CVE-2017-2692: The Keyguard application in ALE-L02C635B140 and earlier versions,ALE-L02C636B140 and earlier versions,ALE-L21C10B150 and earlier versions,ALE-L21C185B↗2017-11-22
▶
CVE-2017-2692 (HIGH CVSS 7.8) | The Keyguard application in ALE-L02 | cvebase.io