What is CVE-2017-17326?

CVE-2017-17326 is a medium-severity vulnerability in Huawei Mate 9 Pro. CVSS score: 4.6/10. Published 2018-03-09.

How severe is CVE-2017-17326?

Medium severity. CVSS v3 base score is 4.6 out of 10.

Vulnerability in Huawei Mate 9 Pro

CVE-2017-17326

Huawei Mate 9 Pro Smartphones with software of LON-AL00BC00B139D; LON-AL00BC00B229 have an activation lock bypass vulnerability. The smartphone is supposed to be activated by the former account after reset if find my phone function is on. The software does not have a sufficient protection of activation lock. Successful exploit could allow an attacker to bypass the activation lock and activate the smartphone by a new account after a series of operation.

EPSS: 0.002 (13.8th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 4.6 (Medium). Vector: CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N.

Affected products

Huawei Mate_9_pro
Huawei Mate_9_pro_fimware — versions lon-al00bc00b139d, lon-al00bc00b229
Huawei Technologies Co., Ltd. Mate 9 Pro — versions LON-AL00BC00B229, Mate 9 Pro LON-AL00BC00B139D

References

psirt@huawei.com (x_refsource_CONFIRM, Vendor Advisory)

Frequently asked questions

What is CVE-2017-17326?: CVE-2017-17326 is a medium-severity vulnerability in Huawei Mate 9 Pro. CVSS score: 4.6/10. Published 2018-03-09.
How severe is CVE-2017-17326?: Medium severity. CVSS v3 base score is 4.6 out of 10.