VYPR
High severity7.1NVD Advisory· Published Nov 22, 2017· Updated May 13, 2026

CVE-2017-2706

CVE-2017-2706

Description

Mate 9 smartphones with software MHA-AL00AC00B125 have a directory traversal vulnerability in Push module. Since the system does not verify the file name during decompression, system directories are traversed. It could be exploited to cause the attacker to replace files and impact the service.

Affected products

2
  • cpe:2.3:o:huawei:mate_9_firmware:*:*:*:*:*:*:*:*
    Range: <=mha-al00ac00b125
  • Huawei Technologies Co., Ltd./Mate 9v5
    Range: MHA-AL00AC00B125

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

1

News mentions

0

No linked articles in our index yet.