CVE-2017-2699
Last modified
CVE-2017-2699 is a vulnerability of currently unknown severity. The Huawei Themes APP in versions earlier than PLK-UL00C17B385, versions earlier than CRR-L09C432B380, versions earlier than LYO-L21C577B128 has a privilege elevation vulnerability. An attacker could exploit this vulnerability to upload theme packs containing malicious files and trick users into installing the theme packets, resulting in the execution of arbitrary code.. EPSS estimates a 0.97% chance of exploitation in the next 30 days.
Description
The Huawei Themes APP in versions earlier than PLK-UL00C17B385, versions earlier than CRR-L09C432B380, versions earlier than LYO-L21C577B128 has a privilege elevation vulnerability. An attacker could exploit this vulnerability to upload theme packs containing malicious files and trick users into installing the theme packets, resulting in the execution of arbitrary code.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Huawei | Honor 7 Firmware | < plk-ul00c17b385 |
| Huawei | Mate S Firmware | < crr-l09c432b380 |
| Huawei | Lyo-L21 Firmware | < lyo-l21c577b128 |
References
- http://www.securityfocus.com/bid/96424Third Party Advisory, VDB Entry
- http://www.securityfocus.com/bid/96424Third Party Advisory, VDB Entry
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2017-2699?
How severe is CVE-2017-2699?
How do I fix CVE-2017-2699?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2017
- CVE-2017-2693ALE-L02C635B140 and earlier versions,ALE-L02C636B140 and ear…
- CVE-2017-2694The AlarmService component in HwVmall with software earlier …
- CVE-2017-2695TIT-AL00C583B211 has a directory traversal vulnerability whi…
- CVE-2017-2696The emerg_data driver in CAM-L21C10B130 and earlier versions…
- CVE-2017-2697The goldeneye driver in NMO-L31C432B120 and earlier versions…
- CVE-2017-2698The ddr_devfreq driver in versions earlier than GRA-UL00C00B…
- CVE-2017-2700AC6005 with software V200R006C10, AC6605 with software V200R…
- CVE-2017-2701Mate 9 with software MHA-AL00AC00B125 has a denial of servic…
- CVE-2017-2702Phone Finder in versions earlier before MHA-AL00C00B170 can …
- CVE-2017-2703Phone Finder in versions earlier before MHA-AL00BC00B156,Ver…
- CVE-2017-2704Smarthome 1.0.2.364 and earlier versions,HiAPP 7.3.0.303 and…7.5
- CVE-2017-2705Huawei P9 smartphones with software versions earlier before …
Are you affected by CVE-2017-2699?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST
