vulnwire
4.6med

CVE-2017-17326

Huawei Mate 9 Pro Smartphones with software of LON-AL00BC00B139D; LON-AL00BC00B229 have an activation lock bypass vulnerability.

Published 8 y ago · modified 4 mo ago · JSON

CVSS
4.6
v3.0 · NVD
CISA KEV
No
not known exploited
EPSS
0.2%
percentile 14%
Public exploits
0
none known

Huawei Mate 9 Pro Smartphones with software of LON-AL00BC00B139D; LON-AL00BC00B229 have an activation lock bypass vulnerability. The smartphone is supposed to be activated by the former account after reset if find my phone function is on. The software does not have a sufficient protection of activation lock. Successful exploit could allow an attacker to bypass the activation lock and activate the smartphone by a new account after a series of operation.

Exploit prediction (EPSS)

0.23% probability of exploitation in the next 30 days, higher than 14% of all scored CVEs.

CVSS scores

Assigned byVersionScoreVector
NVD3.04.6CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
NVD2.02.1AV:L/AC:L/Au:N/C:N/I:P/A:N

Affected products

  • Huawei Technologies Co., Ltd. Mate 9 Pro

References

  • huawei.com /en/psirt/security-advisories/huawei-sa-20171227-01-smartphone-en · x_refsource_CONFIRM, x_transferred

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.