What’s Vulnerable › Vulnerabilities

CVE-2017-2691

• Severity: medium (CVSS 6.8 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2017-11-22 · updated 2026-06-17

Description

Huawei P9 versions earlier before EVA-AL10C00B373, versions earlier before EVA-CL00C92B373, versions earlier before EVA-DL00C17B373, versions earlier before EVA-TL00C01B373 have a lock-screen bypass vulnerability. An unauthenticated attacker could force the phone to the fastboot mode and delete the user's password file during the reboot process, then login the phone without screen lock password after reboot.

Affected products

• Huawei Technologies Co., Ltd. Huawei P9: before eva-tl00c01b373; before eva-dl00c17b373; before eva-cl00c92b373; before eva-al10c00b373 — fixed in eva-al10c00b373, eva-cl00c92b373, eva-dl00c17b373, eva-tl00c01b373

How to fix

Upgrade to a fixed version: Huawei Technologies Co., Ltd. Huawei P9 eva-al10c00b373, eva-cl00c92b373, eva-dl00c17b373, eva-tl00c01b373. Check the vendor advisory for mitigations.

References

• http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170118-01-smartphone-en
• http://www.securityfocus.com/bid/95658
• http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170118-01-smartphone-en
• http://www.securityfocus.com/bid/95658

Get alerted when CVE-2017-2691 or the next vulnerability affects your stack