Read the docs
TI-2017-01934 Aliases CVE-2017-2692GHSA-4fhx-2p3m-rp8w

Command injection in Huawei P8 Lite,Mate 7,Mate S,P8,honor 6,honor 7,SHOTX,G8,

Priority LOW 36CWE-77Published · Updated

Key facts

Attack vector
Local
Privileges required
None
User interaction
Required
Attack complexity
Low
Impact type
Code execution
Confidentiality · integrity · availability
High · High · High
Fix status
No fix listed

Attack profile from CVSS 3.0 · NVD. Fix status from CNA. Impact type from CWE-77.

Summary

The Keyguard application in ALE-L02C635B140 and earlier versions,ALE-L02C636B140 and earlier versions,ALE-L21C10B150 and earlier versions,ALE-L21C185B200 and earlier versions,ALE-L21C432B214 and earlier versions,ALE-L21C464B150 and earlier versions,ALE-L21C636B200 and earlier versions,ALE-L23C605B190 and earlier versions,ALE-TL00C01B250 and earlier versions,ALE-UL00C00B250 and earlier versions,MT7-L09C605B325 and earlier versions,MT7-L09C900B339 and earlier versions,MT7-TL10C900B339 and earlier versions,CRR-CL00C92B172 and earlier versions,CRR-L09C432B180 and earlier versions,CRR-TL00C01B172 and earlier versions,CRR-UL00C00B172 and earlier versions,CRR-UL20C432B171 and earlier versions,GRA-CL00C92B230 and earlier versions,GRA-L09C432B222 and earlier versions,GRA-TL00C01B230SP01 and earlier versions,GRA-UL00C00B230 and earlier versions,GRA-UL00C10B201 and earlier versions,GRA-UL00C432B220 and earlier versions,H60-L04C10B523 and earlier versions,H60-L04C185B523 and earlier versions,H60-L04C636B527 and earlier versions,H60-L04C900B530 and earlier versions,PLK-AL10C00B220 and earlier versions,PLK-AL10C92B220 and earlier versions,PLK-CL00C92B220 and earlier versions,PLK-L01C10B140 and earlier versions,PLK-L01C185B130 and earlier versions,PLK-L01C432B187 and earlier versions,PLK-L01C432B190 and earlier versions,PLK-L01C432B190 and earlier versions,PLK-L01C636B130 and earlier versions,PLK-TL00C01B220 and earlier versions,PLK-TL01HC01B220 and earlier versions,PLK-UL00C17B220 and earlier versions,ATH-AL00C00B210 and earlier versions,ATH-AL00C92B200 and earlier versions,ATH-CL00C92B210 and earlier versions,ATH-TL00C01B210 and earlier versions,ATH-TL00HC01B210 and earlier versions,ATH-UL00C00B210 and earlier versions,RIO-AL00C00B220 and earlier versions,RIO-CL00C92B220 and earlier versions,RIO-TL00C01B220 and earlier versions,RIO-UL00C00B220 and earlier versions have a privilege elevation vulnerability. An attacker may exploit it to launch command injection in order to gain elevated privileges.

Why it matters now

EPSS 0.01025 63rd percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
HuaweiP8 Lite,Mate 7,Mate S,P8,honor 6,honor 7,SHOTX,G8,all versions—No fix listedCNA
  • P8 Lite,Mate 7,Mate S,P8,honor 6,honor 7,SHOTX,G8, VendorHuawei Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 24

CPEVersionsRoleVendor
cpe:2.3:o:huawei:p8_lite_firmware:*:*:*:*:*:*:*:*up to ale-l02c635b140VulnerableHuawei
cpe:2.3:h:huawei:p8_lite:-:*:*:*:*:*:*:*not specified by NVDRunning onHuawei
cpe:2.3:o:huawei:p8_lite_firmware:*:*:*:*:*:*:*:*up to ale-l02c636b140; up to ale-l21c10b150; up to ale-l21c185b200; up to ale-l21c432b214; up to ale-l21c464b150; up to ale-l21c636b200; up to ale-l23c605b190; up to ale-tl00c01b250; up to ale-ul00c00b250.VulnerableHuawei
cpe:2.3:o:huawei:mate_7_firmware:*:*:*:*:*:*:*:*up to mt7-l09c605b325VulnerableHuawei
cpe:2.3:h:huawei:mate_7:-:*:*:*:*:*:*:*not specified by NVDRunning onHuawei
cpe:2.3:o:huawei:mate_7_firmware:*:*:*:*:*:*:*:*up to mt7-l09c900b339; up to mt7-tl10c900b339VulnerableHuawei
cpe:2.3:o:huawei:mate_s_firmware:*:*:*:*:*:*:*:*up to crr-cl00c92b172VulnerableHuawei
cpe:2.3:h:huawei:mate_s:-:*:*:*:*:*:*:*not specified by NVDRunning onHuawei
cpe:2.3:o:huawei:mate_s_firmware:*:*:*:*:*:*:*:*up to crr-l09c432b180; up to crr-tl00c01b172; up to crr-ul00c00b172; up to crr-ul20c432b171VulnerableHuawei
cpe:2.3:o:huawei:p8_firmware:*:*:*:*:*:*:*:*up to gra-cl00c92b230VulnerableHuawei
  • cpe:2.3:o:huawei:p8_lite_firmware:*:*:*:*:*:*:*:* Versions up to ale-l02c635b140 Vulnerable ·Huawei
  • cpe:2.3:h:huawei:p8_lite:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei
  • cpe:2.3:o:huawei:p8_lite_firmware:*:*:*:*:*:*:*:* Versions up to ale-l02c636b140; up to ale-l21c10b150; up to ale-l21c185b200; up to ale-l21c432b214; up to ale-l21c464b150; up to ale-l21c636b200; up to ale-l23c605b190; up to ale-tl00c01b250; up to ale-ul00c00b250. Vulnerable ·Huawei
  • cpe:2.3:o:huawei:mate_7_firmware:*:*:*:*:*:*:*:* Versions up to mt7-l09c605b325 Vulnerable ·Huawei
  • cpe:2.3:h:huawei:mate_7:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei
  • cpe:2.3:o:huawei:mate_7_firmware:*:*:*:*:*:*:*:* Versions up to mt7-l09c900b339; up to mt7-tl10c900b339 Vulnerable ·Huawei
  • cpe:2.3:o:huawei:mate_s_firmware:*:*:*:*:*:*:*:* Versions up to crr-cl00c92b172 Vulnerable ·Huawei
  • cpe:2.3:h:huawei:mate_s:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei
  • cpe:2.3:o:huawei:mate_s_firmware:*:*:*:*:*:*:*:* Versions up to crr-l09c432b180; up to crr-tl00c01b172; up to crr-ul00c00b172; up to crr-ul20c432b171 Vulnerable ·Huawei
  • cpe:2.3:o:huawei:p8_firmware:*:*:*:*:*:*:*:* Versions up to gra-cl00c92b230 Vulnerable ·Huawei
Show 14 more CPE
CPEVersionsRoleVendor
cpe:2.3:h:huawei:p8:-:*:*:*:*:*:*:*not specified by NVDRunning onHuawei
cpe:2.3:o:huawei:p8_firmware:*:*:*:*:*:*:*:*up to gra-l09c432b222; up to gra-tl00c01b230sp01; up to gra-ul00c00b230; up to gra-ul00c10b201; up to gra-ul00c432b220VulnerableHuawei
cpe:2.3:o:huawei:honor_6_firmware:*:*:*:*:*:*:*:*up to h60-l04c10b523VulnerableHuawei
cpe:2.3:h:huawei:honor_6:-:*:*:*:*:*:*:*not specified by NVDRunning onHuawei
cpe:2.3:o:huawei:honor_6_firmware:*:*:*:*:*:*:*:*up to h60-l04c185b523; up to h60-l04c636b527; up to h60-l04c900b530VulnerableHuawei
cpe:2.3:o:huawei:honor_7_firmware:*:*:*:*:*:*:*:*up to plk-al10c00b220VulnerableHuawei
cpe:2.3:h:huawei:honor_7:-:*:*:*:*:*:*:*not specified by NVDRunning onHuawei
cpe:2.3:o:huawei:honor_7_firmware:*:*:*:*:*:*:*:*up to plk-al10c92b220; up to plk-cl00c92b220; up to plk-l01c10b140; up to plk-l01c432b187; up to plk-l01c432b190; up to plk-l01c636b130; up to plk-tl00c01b220; up to plk-tl01hc01b220; up to plk-ul00c17b220VulnerableHuawei
cpe:2.3:o:huawei:shotx_firmware:*:*:*:*:*:*:*:*up to ath-al00c92b200VulnerableHuawei
cpe:2.3:h:huawei:shotx:-:*:*:*:*:*:*:*not specified by NVDRunning onHuawei
cpe:2.3:o:huawei:shotx_firmware:*:*:*:*:*:*:*:*up to ath-cl00c92b210; up to ath-tl00c01b210; up to ath-tl00hc01b210; up to ath-ul00c00b210; up to rio-al00c00b220; up to ath-al00c00b210VulnerableHuawei
cpe:2.3:o:huawei:g8_firmware:*:*:*:*:*:*:*:*up to rio-al00c00b220VulnerableHuawei
cpe:2.3:h:huawei:g8:-:*:*:*:*:*:*:*not specified by NVDRunning onHuawei
cpe:2.3:o:huawei:g8_firmware:*:*:*:*:*:*:*:*up to rio-cl00c92b220; up to rio-tl00c01b220; up to rio-ul00c00b220VulnerableHuawei
  • cpe:2.3:h:huawei:p8:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei
  • cpe:2.3:o:huawei:p8_firmware:*:*:*:*:*:*:*:* Versions up to gra-l09c432b222; up to gra-tl00c01b230sp01; up to gra-ul00c00b230; up to gra-ul00c10b201; up to gra-ul00c432b220 Vulnerable ·Huawei
  • cpe:2.3:o:huawei:honor_6_firmware:*:*:*:*:*:*:*:* Versions up to h60-l04c10b523 Vulnerable ·Huawei
  • cpe:2.3:h:huawei:honor_6:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei
  • cpe:2.3:o:huawei:honor_6_firmware:*:*:*:*:*:*:*:* Versions up to h60-l04c185b523; up to h60-l04c636b527; up to h60-l04c900b530 Vulnerable ·Huawei
  • cpe:2.3:o:huawei:honor_7_firmware:*:*:*:*:*:*:*:* Versions up to plk-al10c00b220 Vulnerable ·Huawei
  • cpe:2.3:h:huawei:honor_7:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei
  • cpe:2.3:o:huawei:honor_7_firmware:*:*:*:*:*:*:*:* Versions up to plk-al10c92b220; up to plk-cl00c92b220; up to plk-l01c10b140; up to plk-l01c432b187; up to plk-l01c432b190; up to plk-l01c636b130; up to plk-tl00c01b220; up to plk-tl01hc01b220; up to plk-ul00c17b220 Vulnerable ·Huawei
  • cpe:2.3:o:huawei:shotx_firmware:*:*:*:*:*:*:*:* Versions up to ath-al00c92b200 Vulnerable ·Huawei
  • cpe:2.3:h:huawei:shotx:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei
  • cpe:2.3:o:huawei:shotx_firmware:*:*:*:*:*:*:*:* Versions up to ath-cl00c92b210; up to ath-tl00c01b210; up to ath-tl00hc01b210; up to ath-ul00c00b210; up to rio-al00c00b220; up to ath-al00c00b210 Vulnerable ·Huawei
  • cpe:2.3:o:huawei:g8_firmware:*:*:*:*:*:*:*:* Versions up to rio-al00c00b220 Vulnerable ·Huawei
  • cpe:2.3:h:huawei:g8:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei
  • cpe:2.3:o:huawei:g8_firmware:*:*:*:*:*:*:*:* Versions up to rio-cl00c92b220; up to rio-tl00c01b220; up to rio-ul00c00b220 Vulnerable ·Huawei

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2017-2692
  2. 2026-10-03 Alias added: GHSA-4fhx-2p3m-rp8w

References

Advisory 1

  • TI-2017-01935 Path traversal in Huawei P8 Lite,Mate 7,Mate S,P8,honor 6,honor 7,SHOTX,G8, CVSS 3.0HIGH 7.8

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences