CVE-2017-2707

CWE-4944 documents4 sources
Severity
7.1HIGH
EPSS
0.0%
top 89.37%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Huawei Mate 9 FirmwareHuawei Technologies Co., Ltd. Mate 9
Timeline
PublishedNov 22
Latest updateMay 13

Description

Mate 9 smartphones with software MHA-AL00AC00B125 have a privilege escalation vulnerability in Push module. An attacker tricks a user to save a rich media into message on the smart phone, which could be exploited to cause the attacker to delete message or fake user to send message.

CVSS vector

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:HExploitability: 1.8 | Impact: 5.2

Affected Packages2 packages

ā–¶NVDhuawei/mate_9_firmwaremha-al00ac00b125
ā–¶CVEListV5huawei_technologies_co.,_ltd./mate_9MHA-AL00AC00B125

šŸ”“Vulnerability Details

2
GHSA
GHSA-8xc6-v3h5-gr99: Mate 9 smartphones with software MHA-AL00AC00B125 have a privilege escalation vulnerability in Push moduleā†—2022-05-13
ā–¶
CVEList
CVE-2017-2707: Mate 9 smartphones with software MHA-AL00AC00B125 have a privilege escalation vulnerability in Push moduleā†—2017-11-22
ā–¶

šŸ’¬Community

1
Bugzilla
CVE-2017-9937 libtiff: memory malloc failure in tif_jbig.c could cause DOS.ā†—2017-07-11
ā–¶
CVE-2017-2707 (HIGH CVSS 7.1) | Mate 9 smartphones with software MH | cvebase.io