What is CVE-2017-2706?

CVE-2017-2706 is a high-severity vulnerability in Huawei Mate 9, classified under Path Traversal. CVSS score: 7.1/10. Published 2017-11-22.

How severe is CVE-2017-2706?

High severity. CVSS v3 base score is 7.1 out of 10.

Path Traversal in Huawei Mate 9

CVE-2017-2706

Mate 9 smartphones with software MHA-AL00AC00B125 have a directory traversal vulnerability in Push module. Since the system does not verify the file name during decompression, system directories are traversed. It could be exploited to cause the attacker to replace files and impact the service.

Vulnerability class: Path Traversal (Directory Traversal)

EPSS: 0.009 (56.3th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.1 (High). Vector: CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H.

Affected products

Huawei Mate_9
Huawei Mate_9_firmware
Huawei Technologies Co., Ltd. Mate 9 — versions MHA-AL00AC00B125

Weakness classification (CWE)

CWE-22 — Path Traversal

References

psirt@huawei.com (x_refsource_CONFIRM, Vendor Advisory)

Frequently asked questions

What is CVE-2017-2706?: CVE-2017-2706 is a high-severity vulnerability in Huawei Mate 9, classified under Path Traversal. CVSS score: 7.1/10. Published 2017-11-22.
How severe is CVE-2017-2706?: High severity. CVSS v3 base score is 7.1 out of 10.