CVE-2016-8776

Severity: medium (CVSS 4.6 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2017-04-02 · updated 2026-06-17
Weakness: CWE-285

Description

Huawei P9 phones with software EVA-AL10C00,EVA-CL10C00,EVA-DL10C00,EVA-TL10C00 and P9 Lite phones with software VNS-L21C185 allow attackers to bypass the factory reset protection (FRP) to enter some functional modules without authorization and perform operations to update the Google account.

Affected products

Huawei Technologies Co., Ltd. Huawei P9: eva-al10c00, eva-cl10c00, eva-dl10c00, eva-tl10c00
Huawei Technologies Co., Ltd. HUAWEI P9 Lite: vns-l21c185

References

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20161207-01-smartphone-en
http://www.securityfocus.com/bid/94836
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20161207-01-smartphone-en
http://www.securityfocus.com/bid/94836

Get alerted when CVE-2016-8776 or the next vulnerability affects your stack