High severity · published Nov 22, 2017
CVE-2017-2699
The Huawei Themes APP in versions earlier than PLK-UL00C17B385, versions earlier than CRR-L09C432B380, versions earlier than LYO-L21C577B128 has a privilege elevation…
7.8
CVSS
1%
EPSS
No
On KEV
Description
The Huawei Themes APP in versions earlier than PLK-UL00C17B385, versions earlier than CRR-L09C432B380, versions earlier than LYO-L21C577B128 has a privilege elevation vulnerability. An attacker could exploit this vulnerability to upload theme packs containing malicious files and trick users into installing the theme packets, resulting in the execution of arbitrary code.
CVSS vector
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Attack vector
Local
Complexity
Low
Privileges
None
User interaction
Required
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)1.0% · higher than 62% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
H7
Honor 7 Firmware · Huawei
before plk-ul00c17b385 · source: NVD
LF
Lyo-l21 Firmware · Huawei
before lyo-l21c577b128 · source: NVD
MS
Mate S Firmware · Huawei
before crr-l09c432b380 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2017-2699
CVE.org
https://www.cve.org/CVERecord?id=CVE-2017-2699
Vendor Advisory
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170222-01-theme-en
Third Party Advisory
http://www.securityfocus.com/bid/96424
More from Honor 7 Firmware
7.8
CVE-2017-2693
ALE-L02C635B140 and earlier versions,ALE-L02C636B140 and earlier versions,ALE-L21C10B150 and earlier versions,ALE-L21C185B200 and earlier versions,ALE-L21C432B214 and earlier…
7.8
CVE-2017-2692
The Keyguard application in ALE-L02C635B140 and earlier versions,ALE-L02C636B140 and earlier versions,ALE-L21C10B150 and earlier versions,ALE-L21C185B200 and earlier…
7.8
CVE-2016-8768
Huawei Honor 6, Honor 6 Plus, Honor 7 phones with software versions earlier than 6.9.16 could allow attackers to disable the PXN defense mechanism by invoking related drive code…