NetSight
high7.8

CVE-2017-2699

The Huawei Themes APP in versions earlier than PLK-UL00C17B385, versions earlier than CRR-L09C432B380, versions earlier than LYO-L21C577B128 has a privilege el…

Impact

The Huawei Themes APP in versions earlier than PLK-UL00C17B385, versions earlier than CRR-L09C432B380, versions earlier than LYO-L21C577B128 has a privilege elevation vulnerability. An attacker could exploit this vulnerability to upload theme packs containing malicious files and trick users into installing the theme packets, resulting in the execution of arbitrary code.

Affected products

VendorProductAffected versions
HuaweiHonor 7 Firmware
before plk-ul00c17b385
HuaweiMate S Firmware
before crr-l09c432b380
HuaweiLyo-L21 Firmware
before lyo-l21c577b128

Weakness classification

References