Directory Traversal Vulnerability in Huawei Mate 9 Smartphones

CVE-2017-2706

Summary

The Huawei Mate 9 smartphone, particularly the model with software version MHA-AL00AC00B125, has a directory traversal vulnerability found in its Push module. This vulnerability arises because the system fails to validate the file name during decompression processes, allowing unauthorized access to system directories. An attacker may exploit this oversight to replace critical system files, potentially disrupting services and compromising device integrity. To mitigate risks, users are advised to ensure their devices are updated with the latest security patches from Huawei.

References