Honor 8,Honor V8,Honor 9,Honor V9,Nova 2,Nova 2 Plus,P9,P10 Plus,Toronto Huawei smart phones with software of versions earlier than FRD-AL0…

Published 8 y ago 2017-11-22 · modified 4 mo ago 2026-06-17 · JSON

CVSS

6.2

v3.0 · NVD

CISA KEV

not known exploited

EPSS

0.3%

percentile 19%

Public exploits

none known

Honor 8,Honor V8,Honor 9,Honor V9,Nova 2,Nova 2 Plus,P9,P10 Plus,Toronto Huawei smart phones with software of versions earlier than FRD-AL00C00B391, versions earlier than FRD-DL00C00B391, versions earlier than KNT-AL10C00B391, versions earlier than KNT-AL20C00B391, versions earlier than KNT-UL10C00B391, versions earlier than KNT-TL10C00B391, versions earlier than Stanford-AL00C00B175, versions earlier than Stanford-AL10C00B175, versions earlier than Stanford-TL00C01B175, versions earlier than Duke-AL20C00B191, versions earlier than Duke-TL30C01B191, versions earlier than Picasso-AL00C00B162, versions earlier than Picasso-TL00C01B162 , versions earlier than Barca-AL00C00B162, versions earlier than Barca-TL00C00B162, versions earlier than EVA-AL10C00B396SP03, versions earlier than EVA-CL00C92B396, versions earlier than EVA-DL00C17B396, versions earlier than EVA-TL00C01B396 , versions earlier than Vicky-AL00AC00B172, versions earlier than Toronto-AL00AC00B191, versions earlier than Toronto-TL10C01B191 have an unlock code verification bypassing vulnerability. An attacker with the root privilege of a mobile can exploit this vulnerability to bypass the unlock code verification and unlock the mobile phone bootloader.

Exploit prediction (EPSS)

0.27% probability of exploitation in the next 30 days, higher than 19% of all scored CVEs.

CVSS scores

Assigned by	Version	Score	Vector
NVD	3.0	6.2	`CVSS:3.0/AV:P/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H`
NVD	2.0	7.2	`AV:L/AC:L/Au:N/C:C/I:C/A:C`

Affected products

Huawei Technologies Co., Ltd. Honor 8,Honor V8,Honor 9,Honor V9,Nova 2,Nova 2 Plus,P9,P10 Plus,Toronto

Classification

Weakness

CWE-287 Improper Authentication

References

huawei.com /en/psirt/security-advisories/huawei-sa-20170807-01-smartphone-en · x_refsource_CONFIRM, x_transferred

Sources

CVE List: CVE-2017-8214
NVD: CVE-2017-8214

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.