cbcvebase.
CVE-2017-2691
published 2017-11-22

CVE-2017-2691: Huawei P9 versions earlier before EVA-AL10C00B373, versions earlier before EVA-CL00C92B373, versions earlier before EVA-DL00C17B373, versions earlier before…

medium6.8CVSS 3.0
AVPACLPRNUINSUCHIHAH
Huawei P9 versions earlier before EVA-AL10C00B373, versions earlier before EVA-CL00C92B373, versions earlier before EVA-DL00C17B373, versions earlier before EVA-TL00C01B373 have a lock-screen bypass vulnerability. An unauthenticated attacker could force the phone to the fastboot mode and delete the user's password file during the reboot process, then login the phone without screen lock password after reboot.

Affected

5 ranges
VendorProductVersion rangeFixed in
huaweip9_firmware< eva-tl00c01b373eva-tl00c01b373
huaweip9_firmware< eva-dl00c17b373eva-dl00c17b373
huaweip9_firmware< eva-cl00c92b373eva-cl00c92b373
huaweip9_firmware< eva-al10c00b373eva-al10c00b373
huawei_technologies_co_ltdhuawei_p9——