CVE-2017-2703: Phone Finder in versions earlier before MHA-AL00BC00B156,Versions earlier before MHA-CL00BC00B156,Versions earlier before MHA-DL00BC00B156,Versions earlier…

PriorityP427medium6.8CVSS 3.0

AVPACLPRNUINSUCHIHAH

EPSS

0.28%

19.7th percentile

Phone Finder in versions earlier before MHA-AL00BC00B156,Versions earlier before MHA-CL00BC00B156,Versions earlier before MHA-DL00BC00B156,Versions earlier before MHA-TL00BC00B156,Versions earlier before EVA-AL10C00B373,Versions earlier before EVA-CL10C00B373,Versions earlier before EVA-DL10C00B373,Versions earlier before EVA-TL10C00B373 can be bypass. An attacker can bypass the Phone Finder by special steps and enter the System Setting.

Affected

8 ranges

Vendor	Product	Version range	Fixed in
huawei	mate_9_firmware	< mha-al00bc00b156	mha-al00bc00b156
huawei	mate_9_firmware	< mha-cl00bc00b156	mha-cl00bc00b156
huawei	mate_9_firmware	< mha-dl00bc00b156	mha-dl00bc00b156
huawei	mate_9_firmware	< mha-tl00bc00b156	mha-tl00bc00b156
huawei	p9_firmware	< eva-al10c00b373	eva-al10c00b373
huawei	p9_firmware	< eva-cl10c00b373	eva-cl10c00b373
huawei	p9_firmware	< eva-dl10c00b373	eva-dl10c00b373
huawei	p9_firmware	< eva-tl10c00b373	eva-tl10c00b373

CVSS provenance

nvdv3.06.8MEDIUMCVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

nvdv2.07.2HIGHAV:L/AC:L/Au:N/C:C/I:C/A:C

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.