CVE-2017-8214

Severity: medium (CVSS 6.2 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2017-11-22 · updated 2026-06-17
Weakness: CWE-287

Description

Honor 8,Honor V8,Honor 9,Honor V9,Nova 2,Nova 2 Plus,P9,P10 Plus,Toronto Huawei smart phones with software of versions earlier than FRD-AL00C00B391, versions earlier than FRD-DL00C00B391, versions earlier than KNT-AL10C00B391, versions earlier than KNT-AL20C00B391, versions earlier than KNT-UL10C00B391, versions earlier than KNT-TL10C00B391, versions earlier than Stanford-AL00C00B175, versions earlier than Stanford-AL10C00B175, versions earlier than Stanford-TL00C01B175, versions earlier than Duke-AL20C00B191, versions earlier than Duke-TL30C01B191, versions earlier than Picasso-AL00C00B162, versions earlier than Picasso-TL00C01B162 , versions earlier than Barca-AL00C00B162, versions earlier than Barca-TL00C00B162, versions earlier than EVA-AL10C00B396SP03, versions earlier than EVA-CL00C92B396, versions earlier than EVA-DL00C17B396, versions earlier than EVA-TL00C01B396 , versions earlier than Vicky-AL00AC00B172, versions earlier than Toronto-AL00AC00B191, versions earlier than Toronto-TL10C01B191 have an unlock code verification bypassing vulnerability. An attacker with the root privilege of a mobile can exploit this vulnerability to bypass the unlock code verification and unlock the mobile phone bootloader.

Affected products

Huawei Technologies Co., Ltd. Honor 8: before frd-al00c00b391; before frd-dl00c00b391 — fixed in frd-al00c00b391, frd-dl00c00b391
Huawei Technologies Co., Ltd. Honor 9: before stanford-al00c00b175; before stanford-al10c00b175; before stanford-tl00c01b175 — fixed in stanford-al00c00b175, stanford-al10c00b175, stanford-tl00c01b175
Huawei Honor V8 Firmware: before knt-al10c00b391; before knt-al20c00b391; before knt-ul10c00b391; before knt-tl10c00b391 — fixed in knt-al10c00b391, knt-al20c00b391, knt-tl10c00b391, knt-ul10c00b391
Huawei Technologies Co., Ltd. Honor V9: before duke-al20c00b191; before duke-tl30c01b191 — fixed in duke-al20c00b191, duke-tl30c01b191
Huawei Nova 2 Firmware: before picasso-al00c00b162; before picasso-tl00c01b162 — fixed in picasso-al00c00b162, picasso-tl00c01b162
Huawei Nova 2 Plus Firmware: before barca-al00c00b162; before barca-tl00c00b162 — fixed in barca-al00c00b162, barca-tl00c00b162
Huawei Technologies Co., Ltd. P10 Plus: before vicky-al00ac00b172 — fixed in vicky-al00ac00b172
Huawei Technologies Co., Ltd. Huawei P9: before eva-al10c00b396sp03; before eva-cl00c92b396; before eva-dl00c17b396; before eva-tl00c01b396 — fixed in eva-al10c00b396sp03, eva-cl00c92b396, eva-dl00c17b396, eva-tl00c01b396
Huawei Toronto Firmware: before toronto-al00ac00b191; before toronto-tl10c01b191 — fixed in toronto-al00ac00b191, toronto-tl10c01b191

How to fix

Upgrade to a fixed version: Huawei Technologies Co., Ltd. Honor 8 frd-al00c00b391, frd-dl00c00b391; Huawei Technologies Co., Ltd. Honor 9 stanford-al00c00b175, stanford-al10c00b175, stanford-tl00c01b175; Huawei Honor V8 Firmware knt-al10c00b391, knt-al20c00b391, knt-tl10c00b391, knt-ul10c00b391; Huawei Technologies Co., Ltd. Honor V9 duke-al20c00b191, duke-tl30c01b191; Huawei Nova 2 Firmware picasso-al00c00b162, picasso-tl00c01b162; Huawei Nova 2 Plus Firmware barca-al00c00b162, barca-tl00c00b162; Huawei Technologies Co., Ltd. P10 Plus vicky-al00ac00b172; Huawei Technologies Co., Ltd. Huawei P9 eva-al10c00b396sp03, eva-cl00c92b396, eva-dl00c17b396, eva-tl00c01b396; Huawei Toronto Firmware toronto-al00ac00b191, toronto-tl10c01b191. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2017-8214 or the next vulnerability affects your stack