Privilege escalation

2017-11-2219:29:00

PRIOn knowledge base

www.prio-n.com

0.001 Low

EPSS

Percentile

33.5%

JSON

The Huawei Themes APP in versions earlier than PLK-UL00C17B385, versions earlier than CRR-L09C432B380, versions earlier than LYO-L21C577B128 has a privilege elevation vulnerability. An attacker could exploit this vulnerability to upload theme packs containing malicious files and trick users into installing the theme packets, resulting in the execution of arbitrary code.

CPENameOperatorVersion
honor_7_firmwareeq< plk-ul0c17b385
lyo-l21_firmwareeq< lyo-l21c577b128
mate_s_firmwareeq< crr-l9c432b380

Name	Operator	Version
honor_7_firmware	eq	< plk-ul0c17b385
lyo-l21_firmware	eq	< lyo-l21c577b128
mate_s_firmware	eq	< crr-l9c432b380

References

www.huawei.com/en/psirt/security-advisories/huawei-sa-20170222-01-theme-en

www.securityfocus.com/bid/96424

0.001 Low

EPSS

Percentile

33.5%

JSON

Related for PRION:CVE-2017-2699