What is CVE-2017-15351?

CVE-2017-15351 is a medium-severity vulnerability in Huawei Honor_v9_play, classified under Improper Authentication. CVSS score: 6.8/10. Published 2018-02-15.

How severe is CVE-2017-15351?

Medium severity. CVSS v3 base score is 6.8 out of 10.

Auth bypass in Huawei Honor_v9_play

CVE-2017-15351

The 'Find Phone' function in Huawei Honor V9 play smart phones with versions earlier than Jimmy-AL00AC00B135 has an authentication bypass vulnerability. Due to improper authentication realization in the 'Find Phone' function. An attacker m…

Vulnerability class: Broken Authentication

EPSS: 0.003 (25.5th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.8 (Medium). Vector: CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.

Affected products

Huawei Honor_v9_play
Huawei Honor_v9_play_firmware — versions jimmy-al00ac00b135
Huawei Technologies Co., Ltd. Honor V9 Play — versions Versions earlier than Jimmy-AL00AC00B135

Weakness classification (CWE)

CWE-287 — Improper Authentication

References

psirt@huawei.com (x_refsource_CONFIRM, Vendor Advisory)

Frequently asked questions

What is CVE-2017-15351?: CVE-2017-15351 is a medium-severity vulnerability in Huawei Honor_v9_play, classified under Improper Authentication. CVSS score: 6.8/10. Published 2018-02-15.
How severe is CVE-2017-15351?: Medium severity. CVSS v3 base score is 6.8 out of 10.