CVE-2017-2693

CWE-22 — Path Traversal6 documents5 sources
Severity
7.8HIGH
EPSS
0.2%
top 53.08%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
8
Huawei G8 FirmwareHuawei Honor 6 FirmwareHuawei Honor 7 Firmware+5 more
Timeline
PublishedNov 22
Latest updateMay 17

Description

ALE-L02C635B140 and earlier versions,ALE-L02C636B140 and earlier versions,ALE-L21C10B150 and earlier versions,ALE-L21C185B200 and earlier versions,ALE-L21C432B214 and earlier versions,ALE-L21C464B150 and earlier versions,ALE-L21C636B200 and earlier versions,ALE-L23C605B190 and earlier versions,ALE-TL00C01B250 and earlier versions,ALE-UL00C00B250 and earlier versions,MT7-L09C605B325 and earlier versions,MT7-L09C900B339 and earlier versions,MT7-TL10C900B339 and earlier versions,CRR-CL00C92B172 and…

CVSS vector

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Affected Packages8 packages

▶NVDhuawei/g8_firmwarerio-al00c00b220+3
▶NVDhuawei/p8_firmwaregra-cl00c92b230+5
▶NVDhuawei/shotx_firmwareath-al00c92b200+6
▶NVDhuawei/mate_7_firmwaremt7-l09c605b325+2
▶NVDhuawei/mate_s_firmwarecrr-cl00c92b172+4

🔴Vulnerability Details

2
GHSA
GHSA-x543-4999-2vx5: ALE-L02C635B140 and earlier versions,ALE-L02C636B140 and earlier versions,ALE-L21C10B150 and earlier versions,ALE-L21C185B200 and earlier versions,ALE↗2022-05-17
▶
CVEList
CVE-2017-2693: ALE-L02C635B140 and earlier versions,ALE-L02C636B140 and earlier versions,ALE-L21C10B150 and earlier versions,ALE-L21C185B200 and earlier versions,ALE↗2017-11-22
▶

💥Exploits & PoCs

1
Exploit-DB
LibTIFF - '_TIFFVGetField (tiffsplit)' Out-of-Bounds Read↗2017-07-06
▶

💬Community

2
Bugzilla
CVE-2017-5637 zookeeper: Incorrect input validation with wchp/wchc four letter words↗2017-05-23
▶
Bugzilla
CVE-2017-9147 libtiff: Out of bounds read in _TIFFVGetField↗2017-05-23
▶
CVE-2017-2693 (HIGH CVSS 7.8) | ALE-L02C635B140 and earlier version | cvebase.io