CVE-2017-17279
First published: Fri Mar 09 2018(Updated: )
Credit: psirt@huawei.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Huawei Mate 9 Pro Firmware | <lon-al00b_8.0.0.343\(c00\) | |
| Huawei Mate 9 Pro |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2017-17279?
CVE-2017-17279 is an authentication bypass vulnerability in the soundtrigger module of Huawei Mate 9 Pro smartphones with software versions before LON-AL00B 8.0.0.343(C00).
How does the authentication bypass vulnerability in CVE-2017-17279 work?
The vulnerability occurs due to the improper design of the soundtrigger module, allowing an attacker to trick a user into installing a malicious application that can exploit the vulnerability.
What is the severity of CVE-2017-17279?
CVE-2017-17279 has a severity rating of medium (5.5 out of 10).
How can I fix the authentication bypass vulnerability in CVE-2017-17279?
To fix the vulnerability, it is recommended to update the software to version LON-AL00B 8.0.0.343(C00) or later.
Where can I find more information about CVE-2017-17279?
You can find more information about CVE-2017-17279 in the security advisories released by Huawei (http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180307-01-smartphone-en) and the entry on SecurityFocus (http://www.securityfocus.com/bid/103360).
- collector/nvd-index
- vendor/huawei
- product/mate 9 pro firmware
- canonical/huawei mate 9 pro firmware
- product/mate 9 pro
- canonical/huawei mate 9 pro