What’s Vulnerable › Vulnerabilities

CVE-2017-2713

• Severity: medium (CVSS 5.4 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2017-11-22 · updated 2026-06-17
• Weakness: CWE-20

Description

HUAWEI P9 smartphones with software versions earlier before EVA-L09C432B383, versions earlier before EVA-L09C636B380, versions earlier before VIE-L09C432B370, versions earlier before VIE-L29C636B370 have an insufficient input validation vulnerability. An attacker could exploit this vulnerability to tamper with air interface signaling messages and obtain some communication information.

Affected products

• Huawei Technologies Co., Ltd. Huawei P9: before eva-l09c432b383; before eva-l09c636b380; before vie-l09c432b370; before vie-l29c636b370 — fixed in eva-l09c432b383, eva-l09c636b380, vie-l09c432b370, vie-l29c636b370

How to fix

Upgrade to a fixed version: Huawei Technologies Co., Ltd. Huawei P9 eva-l09c432b383, eva-l09c636b380, vie-l09c432b370, vie-l29c636b370. Check the vendor advisory for mitigations.

References

• http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170419-01-smartphone-en
• http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170419-01-smartphone-en

Get alerted when CVE-2017-2713 or the next vulnerability affects your stack