Vulnerability Description
Huawei P9 smartphones with software versions earlier before EVA-AL10C00B365, versions earlier before EVA-AL00C00B365, versions earlier before EVA-CL00C92B365, versions earlier before EVA-DL00C17B365, versions earlier before EVA-TL00C01B365 have a phone activation bypass vulnerability. Successful exploit could allow an unauthenticated attacker to bypass phone activation to settings page of the phone.
CVSS Score
LOW
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Huawei | P9 Firmware | < eva-al00c00b365 |
| Huawei | P9 | - |
References
- http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170118-02-smartphIssue TrackingVendor Advisory
- http://www.securityfocus.com/bid/95661Third Party AdvisoryVDB Entry
- http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170118-02-smartphIssue TrackingVendor Advisory
- http://www.securityfocus.com/bid/95661Third Party AdvisoryVDB Entry
FAQ
What is CVE-2017-2705?
CVE-2017-2705 is a vulnerability with a CVSS score of 2.4 (LOW). Huawei P9 smartphones with software versions earlier before EVA-AL10C00B365, versions earlier before EVA-AL00C00B365, versions earlier before EVA-CL00C92B365, versions earlier before EVA-DL00C17B365, ...
How severe is CVE-2017-2705?
CVE-2017-2705 has been rated LOW with a CVSS base score of 2.4/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2017-2705?
Check the references section above for vendor advisories and patch information. Affected products include: Huawei P9 Firmware, Huawei P9.