CVE-2017-2693

N/A
Published: November 22, 2017 at 07:00 PM UTC
Updated: June 17, 2026 at 01:16 AM UTC
16 products affected across 1 vendorP8 FirmwareMate S FirmwareHonor 6 Firmware

Using P8 Lite,Mate 7,Mate S,P8,honor 6,honor 7,SHOTX,G8, by Huawei Technologies Co., Ltd.?

Get instant alerts when new vulnerabilities affect P8 Lite,Mate 7,Mate S,P8,honor 6,honor 7,SHOTX,G8, - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Severity
N/A
Exploit prediction
EPSS 1%

Description

ALE-L02C635B140 and earlier versions,ALE-L02C636B140 and earlier versions,ALE-L21C10B150 and earlier versions,ALE-L21C185B200 and earlier versions,ALE-L21C432B214 and earlier versions,ALE-L21C464B150 and earlier versions,ALE-L21C636B200 and earlier versions,ALE-L23C605B190 and earlier versions,ALE-TL00C01B250 and earlier versions,ALE-UL00C00B250 and earlier versions,MT7-L09C605B325 and earlier versions,MT7-L09C900B339 and earlier versions,MT7-TL10C900B339 and earlier versions,CRR-CL00C92B172 and earlier versions,CRR-L09C432B180 and earlier versions,CRR-TL00C01B172 and earlier versions,CRR-UL00C00B172 and earlier versions,CRR-UL20C432B171 and earlier versions,GRA-CL00C92B230 and earlier versions,GRA-L09C432B222 and earlier versions,GRA-TL00C01B230SP01 and earlier versions,GRA-UL00C00B230 and earlier versions,GRA-UL00C10B201 and earlier versions,GRA-UL00C432B220 and earlier versions,H60-L04C10B523 and earlier versions,H60-L04C185B523 and earlier versions,H60-L04C636B527 and earlier versions,H60-L04C900B530 and earlier versions,PLK-AL10C00B220 and earlier versions,PLK-AL10C92B220 and earlier versions,PLK-CL00C92B220 and earlier versions,PLK-L01C10B140 and earlier versions,PLK-L01C185B130 and earlier versions,PLK-L01C432B187 and earlier versions,PLK-L01C432B190 and earlier versions,PLK-L01C432B190 and earlier versions,PLK-L01C636B130 and earlier versions,PLK-TL00C01B220 and earlier versions,PLK-TL01HC01B220 and earlier versions,PLK-UL00C17B220 and earlier versions,ATH-AL00C00B210 and earlier versions,ATH-AL00C92B200 and earlier versions,ATH-CL00C92B210 and earlier versions,ATH-TL00C01B210 and earlier versions,ATH-TL00HC01B210 and earlier versions,ATH-UL00C00B210 and earlier versions,RIO-AL00C00B220 and earlier versions,RIO-CL00C92B220 and earlier versions,RIO-TL00C01B220 and earlier versions,RIO-UL00C00B220 and earlier versions have a path traversal vulnerability. An attacker may exploit it to decompress malicious files into a target path.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

v ≤ rio-al00c00b220v ≤ rio-cl00c92b220v ≤ rio-tl00c01b220v ≤ rio-ul00c00b220
huawei-g8 (same device)
v ≤ h60-l04c10b523v ≤ h60-l04c185b523v ≤ h60-l04c636b527v ≤ h60-l04c900b530
huawei-honor-6 (same device)
v ≤ plk-al10c00b220v ≤ plk-al10c92b220v ≤ plk-cl00c92b220v ≤ plk-l01c10b140v ≤ plk-l01c432b187v ≤ plk-l01c432b190v ≤ plk-l01c636b130v ≤ plk-tl00c01b220v ≤ plk-tl01hc01b220v ≤ plk-ul00c17b220
huawei-honor-7 (same device)
v ≤ mt7-l09c605b325v ≤ mt7-l09c900b339v ≤ mt7-tl10c900b339
huawei-mate-7 (same device)
v ≤ crr-cl00c92b172v ≤ crr-l09c432b180v ≤ crr-tl00c01b172v ≤ crr-ul00c00b172v ≤ crr-ul20c432b171
huawei-mate-s (same device)
v ≤ gra-cl00c92b230v ≤ gra-l09c432b222v ≤ gra-tl00c01b230sp01v ≤ gra-ul00c00b230v ≤ gra-ul00c10b201v ≤ gra-ul00c432b220
huawei-p8 (same device)
v ≤ ale-l02c635b140v ≤ ale-l02c636b140v ≤ ale-l21c10b150v ≤ ale-l21c185b200v ≤ ale-l21c432b214v ≤ ale-l21c464b150v ≤ ale-l21c636b200v ≤ ale-l23c605b190v ≤ ale-tl00c01b250v ≤ ale-ul00c00b250.
huawei-p8-lite (same device)
v ≤ ath-al00c00b210v ≤ ath-al00c92b200v ≤ ath-cl00c92b210v ≤ ath-tl00c01b210v ≤ ath-tl00hc01b210v ≤ ath-ul00c00b210v ≤ rio-al00c00b220
huawei-shotx (same device)
v ≤ 02C635B140
v ≤ 02C635B140

Remediation

No guide yet

No remediation guidance has been written for this CVE yet. What the record does show:

References (2)

VDB Entryx_refsource_BIDThird Party Advisory
http://www.securityfocus.com/bid/95919

CVSS

Confidentiality
PARTIAL
Integrity
PARTIAL
Availability
PARTIAL
Vector?

Quick Info

StatusMODIFIED
CWE
CWE-22

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Free plan, no card