CVE-2017-2727: Medium severity huawei p9 firmware vulnerability
Huawei P9 smart phones with software versions earlier before EVA-AL00C00B365, versions earlier before EVA-AL10C00B365,Versions earlier before EVA-CL00C92B365, versions earlier before EVA-DL00C17B365, versions earlier before EVA-TL00C01B365 have a privilege escalation vulnerability. An unauthenticated attacker can bypass phone activation to user management page of the phone and create a new user. Successful exploit could allow the attacker operate part function of the phone.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2017-2727?
The severity of CVE-2017-2727 is medium with a severity value of 4.3.
Which Huawei P9 smartphones are affected by CVE-2017-2727?
Huawei P9 smart phones with software versions earlier before EVA-AL00C00B365, versions earlier before EVA-AL10C00B365, versions earlier before EVA-CL00C92B365, versions earlier before EVA-DL00C17B365, versions earlier before EVA-TL00C01B365 are affected by CVE-2017-2727.
How can I fix CVE-2017-2727?
To fix CVE-2017-2727, update your Huawei P9 smartphone software to the EVA-AL00C00B365, EVA-AL10C00B365, EVA-CL00C92B365, EVA-DL00C17B365, or EVA-TL00C01B365 versions.
Where can I find more information about CVE-2017-2727?
You can find more information about CVE-2017-2727 on the Huawei PSIRT (Product Security Incident Response Team) website: http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170209-01-smartphone-en.