CVSS: 7.3EPSS: 0%CPEs: 3EXPL: 0CVE-2017-17172
https://notcve.org/view.php?id=CVE-2017-17172
14 Jun 2018 — Huawei smart phones LYO-L21 with software LYO-L21C479B107, LYO-L21C479B107 have a privilege escalation vulnerability. An authenticated, local attacker can crafts malformed packets after tricking a user to install a malicious application and exploit this vulnerability when in the exception handling process. Successful exploitation may cause the attacker to obtain a higher privilege of the smart phones. Los smartphones Huawei LYO-L21 con software en versiones LYO-L21C479B107 y LYO-L21C479B107 tienen una vulne... • http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180613-01-smartphone-en • CWE-755: Improper Handling of Exceptional Conditions •
CVSS: 7.8EPSS: 0%CPEs: 6EXPL: 0CVE-2017-2699
https://notcve.org/view.php?id=CVE-2017-2699
22 Nov 2017 — The Huawei Themes APP in versions earlier than PLK-UL00C17B385, versions earlier than CRR-L09C432B380, versions earlier than LYO-L21C577B128 has a privilege elevation vulnerability. An attacker could exploit this vulnerability to upload theme packs containing malicious files and trick users into installing the theme packets, resulting in the execution of arbitrary code. Huawei Themes APP en versiones anteriores a la PLK-UL00C17B385; versiones anteriores a la CRR-L09C432B380 y versiones anteriores a la LYO-L... • http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170222-01-theme-en • CWE-434: Unrestricted Upload of File with Dangerous Type •