CVE-2017-2703: huawei technologies co., ltd. mate 9, p9
Vulnerability summary
CVE-2017-2703 is a high (CVSS 7.2) vulnerability in huawei technologies co., ltd. mate 9, p9. EPSS estimates a 0.28% chance of exploitation in the next 30 days, higher than 18.8% of scored vulnerabilities.
Timeline
- 22-11-2017PublishedVulnerability first disclosed.
- 17-09-2024Last modifiedVulnerability information updated.
Description
Phone Finder in versions earlier before MHA-AL00BC00B156,Versions earlier before MHA-CL00BC00B156,Versions earlier before MHA-DL00BC00B156,Versions earlier before MHA-TL00BC00B156,Versions earlier before EVA-AL10C00B373,Versions earlier before EVA-CL10C00B373,Versions earlier before EVA-DL10C00B373,Versions earlier before EVA-TL10C00B373 can be bypass. An attacker can bypass the Phone Finder by special steps and enter the System Setting.
CVSS metrics
2 scores · 1 source · 2 versionsEPSS trend
Probability
0.28%
Chance of exploitation in the next 30 days
Percentile
19%
Versus all other CVEs
30-day change
0.00 pp
From 0.28% on 20-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Huawei2 products
- mate_9_firmware< mha-al00bc00b156 | < mha-cl00bc00b156 | < mha-dl00bc00b156 | < mha-tl00bc00b156
- p9_firmware< eva-al10c00b373 | < eva-cl10c00b373 | < eva-dl10c00b373 | < eva-tl10c00b373
Huawei technologies co., ltd.1 product
- mate 9, p9Versions earlier before MHA-AL00BC00B156,Versions earlier before MHA-CL00BC00B156,Versions earlier before MHA-DL00BC00B156,Versions earlier before MHA-TL00BC00B156,Versions earlier before EVA-AL10C00B373,Versions earlier before EVA-CL10C00B373,Versions earlier before EVA-DL10C00B373,Versions earlier before EVA-TL10C00B373,
2 vendors · 3 products
References
2 links- www.huawei.com/en/psirt/security-advisories/huawei-sa-20170118-05-smartphone-enX Refsource CONFIRMIssue TrackingVendor Advisory