What’s Vulnerable › Vulnerabilities

CVE-2017-2703

• Severity: medium (CVSS 6.8 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2017-11-22 · updated 2026-06-17

Description

Phone Finder in versions earlier before MHA-AL00BC00B156,Versions earlier before MHA-CL00BC00B156,Versions earlier before MHA-DL00BC00B156,Versions earlier before MHA-TL00BC00B156,Versions earlier before EVA-AL10C00B373,Versions earlier before EVA-CL10C00B373,Versions earlier before EVA-DL10C00B373,Versions earlier before EVA-TL10C00B373 can be bypass. An attacker can bypass the Phone Finder by special steps and enter the System Setting.

Affected products

• Huawei Technologies Co., Ltd. Mate 9: before mha-al00bc00b156; before mha-cl00bc00b156; before mha-dl00bc00b156; before mha-tl00bc00b156 — fixed in mha-al00bc00b156, mha-cl00bc00b156, mha-dl00bc00b156, mha-tl00bc00b156
• Huawei Technologies Co., Ltd. Huawei P9: before eva-al10c00b373; before eva-cl10c00b373; before eva-dl10c00b373; before eva-tl10c00b373 — fixed in eva-al10c00b373, eva-cl10c00b373, eva-dl10c00b373, eva-tl10c00b373

How to fix

Upgrade to a fixed version: Huawei Technologies Co., Ltd. Mate 9 mha-al00bc00b156, mha-cl00bc00b156, mha-dl00bc00b156, mha-tl00bc00b156; Huawei Technologies Co., Ltd. Huawei P9 eva-al10c00b373, eva-cl10c00b373, eva-dl10c00b373, eva-tl10c00b373. Check the vendor advisory for mitigations.

References

• http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170118-05-smartphone-en
• http://www.securityfocus.com/bid/95657
• http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170118-05-smartphone-en
• http://www.securityfocus.com/bid/95657

Get alerted when CVE-2017-2703 or the next vulnerability affects your stack