CVE-2017-2706

Name of the Vulnerable Software and Affected Versions Huawei Mate 9 smartphones with software MHA-AL00AC00B125

Description The issue is related to a directory traversal vulnerability in the Push module. This occurs because the system does not verify the file name during decompression, allowing system directories to be traversed. This could potentially be exploited to replace files and impact the service.

Recommendations For Huawei Mate 9 smartphones with software MHA-AL00AC00B125, consider restricting access to the Push module until a fix is available. As a temporary workaround, avoid using the decompression feature in the Push module to minimize the risk of exploitation.