Skip to content
OpenAdvisories
Unscored CVE-2017-2699 EUVD-2017-11842GHSA-gqq5-75vx-5rw6

The Huawei Themes APP in versions earlier than PLK-UL00C17B385, versions earlier than CRR-L09C432B380, versions earlier than LYO-L21C577B12…

Published Nov 22, 2017 · Updated Sep 16, 2024 · Assigned by huawei

Vendor: Huawei Product: Honor 7, Mate S,LYO-L21 Category: Network devices

Description

The Huawei Themes APP in versions earlier than PLK-UL00C17B385, versions earlier than CRR-L09C432B380, versions earlier than LYO-L21C577B128 has a privilege elevation vulnerability. An attacker could exploit this vulnerability to upload theme packs containing malicious files and trick users into installing the theme packets, resulting in the execution of arbitrary code.

Affected products

VendorProductAffectedFixed
Huawei Technologies Honor 7, Mate S,LYO-L21 Earlier than PLK-UL00C17B385 versions, Earlier than CRR-L09C432B380 versions, Earlier than LYO-L21C577B128 versions —

References