CVE-2017-2699

published 2017-11-22

CVE-2017-2699: The Huawei Themes APP in versions earlier than PLK-UL00C17B385, versions earlier than CRR-L09C432B380, versions earlier than LYO-L21C577B128 has a privilege…

high 7.8 CVSS 3.0

AV L AC L PR N UI R S U C H I H A H

The Huawei Themes APP in versions earlier than PLK-UL00C17B385, versions earlier than CRR-L09C432B380, versions earlier than LYO-L21C577B128 has a privilege elevation vulnerability. An attacker could exploit this vulnerability to upload theme packs containing malicious files and trick users into installing the theme packets, resulting in the execution of arbitrary code.

Affected

3 ranges

Vendor	Product	Version range	Fixed in
huawei	honor_7_firmware	< plk-ul00c17b385	plk-ul00c17b385
huawei	lyo-l21_firmware	< lyo-l21c577b128	lyo-l21c577b128
huawei	mate_s_firmware	< crr-l09c432b380	crr-l09c432b380

CWE-434