CVE-2017-2699: The Huawei Themes APP in versions earlier than PLK-UL00C17B385, versions earlier than CRR-L09C432B380, versions earlier than LYO-L21C577B128 has a privilege…

PriorityP338high7.8CVSS 3.0

AVLACLPRNUIRSUCHIHAH

EPSS

0.97%

58.1th percentile

The Huawei Themes APP in versions earlier than PLK-UL00C17B385, versions earlier than CRR-L09C432B380, versions earlier than LYO-L21C577B128 has a privilege elevation vulnerability. An attacker could exploit this vulnerability to upload theme packs containing malicious files and trick users into installing the theme packets, resulting in the execution of arbitrary code.

Affected

3 ranges

Vendor	Product	Version range	Fixed in
huawei	honor_7_firmware	< plk-ul00c17b385	plk-ul00c17b385
huawei	lyo-l21_firmware	< lyo-l21c577b128	lyo-l21c577b128
huawei	mate_s_firmware	< crr-l09c432b380	crr-l09c432b380

CVSS provenance

nvdv3.07.8HIGHCVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

nvdv2.06.8MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:P

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.