CVE-2017-17326

Severity: medium (CVSS 4.6 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2018-03-09 · updated 2026-06-17

Description

Huawei Mate 9 Pro Smartphones with software of LON-AL00BC00B139D; LON-AL00BC00B229 have an activation lock bypass vulnerability. The smartphone is supposed to be activated by the former account after reset if find my phone function is on. The software does not have a sufficient protection of activation lock. Successful exploit could allow an attacker to bypass the activation lock and activate the smartphone by a new account after a series of operation.

Affected products

Huawei Mate 9 Pro Fimware: lon-al00bc00b139d, lon-al00bc00b229

References

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171227-01-smartphone-en
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171227-01-smartphone-en

Get alerted when CVE-2017-17326 or the next vulnerability affects your stack