CVE-2017-2691: Huawei P9 versions earlier before EVA-AL10C00B373, versions earlier before EVA-CL00C92B373, versions earlier before EVA-DL00C17B373, versions earlier before…

PriorityP425medium6.8CVSS 3.0

AVPACLPRNUINSUCHIHAH

EPSS

0.28%

20.4th percentile

Huawei P9 versions earlier before EVA-AL10C00B373, versions earlier before EVA-CL00C92B373, versions earlier before EVA-DL00C17B373, versions earlier before EVA-TL00C01B373 have a lock-screen bypass vulnerability. An unauthenticated attacker could force the phone to the fastboot mode and delete the user's password file during the reboot process, then login the phone without screen lock password after reboot.

Affected

5 ranges

Vendor	Product	Version range	Fixed in
huawei	p9_firmware	< eva-tl00c01b373	eva-tl00c01b373
huawei	p9_firmware	< eva-dl00c17b373	eva-dl00c17b373
huawei	p9_firmware	< eva-cl00c92b373	eva-cl00c92b373
huawei	p9_firmware	< eva-al10c00b373	eva-al10c00b373
huawei_technologies_co_ltd	huawei_p9	—	—

CVSS provenance

nvdv3.06.8MEDIUMCVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

nvdv2.07.2HIGHAV:L/AC:L/Au:N/C:C/I:C/A:C

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.