← Back

CVE-2017-2691

nvd nist
Published: Nov 22, 2017Modified: May 13, 2026

JSON object

Loading...
6.8
Vector
CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitability: 0.9 / Impact: 5.9
Source: NVD

Description

Huawei P9 versions earlier before EVA-AL10C00B373, versions earlier before EVA-CL00C92B373, versions earlier before EVA-DL00C17B373, versions earlier before EVA-TL00C01B373 have a lock-screen bypass vulnerability. An unauthenticated attacker could force the phone to the fastboot mode and delete the user's password file during the reboot process, then login the phone without screen lock password after reboot.

Affected (4)

Products: Huawei: P9 Firmware
Huawei
1 product
P9 Firmware
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
P9 Firmware
Before eva-tl00c01b373
Configuration B
1 vulnerable
Vulnerable SoftwareAffected Versions
P9 Firmware
Before eva-dl00c17b373
Configuration C
1 vulnerable
Vulnerable SoftwareAffected Versions
P9 Firmware
Before eva-cl00c92b373
Configuration D
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
P9 Firmware
Before eva-al10c00b373
Running on/withPlatform Versions
Huawei
P9
All versions

References (4)

Source: psirt@huawei.com
Issue TrackingVendor Advisory
Source: psirt@huawei.com
Third Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
Issue TrackingVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryVDB Entry

Timeline

No history available yet.