VYPR
High severity7.1NVD Advisory· Published Nov 22, 2017· Updated Jun 17, 2026

CVE-2017-2706

CVE-2017-2706

Description

Mate 9 smartphones with software MHA-AL00AC00B125 have a directory traversal vulnerability in Push module. Since the system does not verify the file name during decompression, system directories are traversed. It could be exploited to cause the attacker to replace files and impact the service.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • cpe:2.3:o:huawei:mate_9_firmware:*:*:*:*:*:*:*:*
    Range: <=mha-al00ac00b125
  • Huawei Technologies Co., Ltd./Mate 9v5
    Range: MHA-AL00AC00B125

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.