Vulnerability Database

290,206

Total vulnerabilities in the database

CVE-2017-2699

The Huawei Themes APP in versions earlier than PLK-UL00C17B385, versions earlier than CRR-L09C432B380, versions earlier than LYO-L21C577B128 has a privilege elevation vulnerability. An attacker could exploit this vulnerability to upload theme packs containing malicious files and trick users into installing the theme packets, resulting in the execution of arbitrary code.

  • Published: Nov 22, 2017
  • Updated: Apr 13, 2023
  • CVE: CVE-2017-2699
  • Severity: High
  • Exploit:

CVSS v3:

  • Severity: High
  • Score: 7.8
  • AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CVSS v2:

  • Severity: Medium
  • Score: 6.8
  • AV:N/AC:M/Au:N/C:P/I:P/A:P

CWEs:

Software From Fixed in
huawei / honor_7_firmware - plk-ul00c17b385
huawei / mate_s_firmware - crr-l09c432b380
huawei / lyo-l21_firmware - lyo-l21c577b128