Read the docs
TI-2017-12616 Aliases CVE-2017-17172GHSA-77mv-hm7r-pr35

Improper handling of exceptional conditions in Huawei LYO-L21

Priority LOW 32CWE-755Published · Updated

Key facts

Attack vector
Local
Privileges required
Low
User interaction
Required
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
High · High · High
Fix status
No fix listed

Attack profile from CVSS 3.0 · NVD. Fix status from CNA.

Summary

Huawei smart phones LYO-L21 with software LYO-L21C479B107, LYO-L21C479B107 have a privilege escalation vulnerability. An authenticated, local attacker can crafts malformed packets after tricking a user to install a malicious application and exploit this vulnerability when in the exception handling process. Successful exploitation may cause the attacker to obtain a higher privilege of the smart phones.

Why it matters now

EPSS 0.00249 16th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
HuaweiLYO-L21LYO-L21C479B107, LYO-L21C479B107—No fix listedCNA
  • LYO-L21 VendorHuawei Affected LYO-L21C479B107, LYO-L21C479B107 Fixed in — No fix listed CNA

CPE configurations NVD · 3

CPEVersionsRoleVendor
cpe:2.3:h:huawei:lyo-l21:*:*:*:*:*:*:*:*all versionsVulnerableHuawei
cpe:2.3:o:huawei:lyo-l21_firmware:lyo-l21c479b107:*:*:*:*:*:*:*lyo-l21c479b107Running onHuawei
cpe:2.3:o:huawei:lyo-l21_firmware:lyo-l21c577b126:*:*:*:*:*:*:*lyo-l21c577b126Running onHuawei
  • cpe:2.3:h:huawei:lyo-l21:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Huawei
  • cpe:2.3:o:huawei:lyo-l21_firmware:lyo-l21c479b107:*:*:*:*:*:*:* Versions lyo-l21c479b107 Running on ·Huawei
  • cpe:2.3:o:huawei:lyo-l21_firmware:lyo-l21c577b126:*:*:*:*:*:*:* Versions lyo-l21c577b126 Running on ·Huawei

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2017-17172
  2. 2026-10-03 Alias added: GHSA-77mv-hm7r-pr35

References

Advisory 1

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences