PT-2017-18219 · Huawei · P10 Plus+6

Wen Guanxing · Publicado 2017-11-22 · Atualizado 2019-10-03 · CVE-2017-8215

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Honor 8 versions earlier than FRD-AL00C00B391 Honor V8 versions earlier than FRD-DL00C00B391 Honor 9 versions earlier than KNT-AL10C00B391 Honor 9 versions earlier than KNT-AL20C00B391 Honor 9 versions earlier than KNT-UL10C00B391 Honor 9 versions earlier than KNT-TL10C00B391 Nova 2 versions earlier than Stanford-AL00C00B175 Nova 2 versions earlier than Stanford-AL10C00B175 Nova 2 versions earlier than Stanford-TL00C01B175 Nova 2 Plus versions earlier than Duke-AL20C00B191 Nova 2 Plus versions earlier than Duke-TL30C01B191 P9 versions earlier than Picasso-AL00C00B162 P9 versions earlier than Picasso-TL00C01B162 P10 Plus versions earlier than Barca-AL00C00B162 P10 Plus versions earlier than Barca-TL00C00B162 Toronto Huawei smart phones versions earlier than EVA-AL10C00B396SP03 Toronto Huawei smart phones versions earlier than EVA-CL00C92B396 Toronto Huawei smart phones versions earlier than EVA-DL00C17B396 Toronto Huawei smart phones versions earlier than EVA-TL00C01B396 Toronto Huawei smart phones versions earlier than Vicky-AL00AC00B172 Toronto Huawei smart phones versions earlier than Toronto-AL00AC00B191 Toronto Huawei smart phones versions earlier than Toronto-TL10C01B191

Description The issue is related to a permission control vulnerability. An attacker with system privilege on a mobile device can exploit this vulnerability to bypass the unlock code verification and unlock the mobile phone bootloader.

Recommendations For Honor 8 versions earlier than FRD-AL00C00B391, update to a version later than FRD-AL00C00B391. For Honor V8 versions earlier than FRD-DL00C00B391, update to a version later than FRD-DL00C00B391. For Honor 9 versions earlier than KNT-AL10C00B391, update to a version later than KNT-AL10C00B391. For Honor 9 versions earlier than KNT-AL20C00B391, update to a version later than KNT-AL20C00B391. For Honor 9 versions earlier than KNT-UL10C00B391, update to a version later than KNT-UL10C00B391. For Honor 9 versions earlier than KNT-TL10C00B391, update to a version later than KNT-TL10C00B391. For Nova 2 versions earlier than Stanford-AL00C00B175, update to a version later than Stanford-AL00C00B175. For Nova 2 versions earlier than Stanford-AL10C00B175, update to a version later than Stanford-AL10C00B175. For Nova 2 versions earlier than Stanford-TL00C01B175, update to a version later than Stanford-TL00C01B175. For Nova 2 Plus versions earlier than Duke-AL20C00B191, update to a version later than Duke-AL20C00B191. For Nova 2 Plus versions earlier than Duke-TL30C01B191, update to a version later than Duke-TL30C01B191. For P9 versions earlier than Picasso-AL00C00B162, update to a version later than Picasso-AL00C00B162. For P9 versions earlier than Picasso-TL00C01B162, update to a version later than Picasso-TL00C01B162. For P10 Plus versions earlier than Barca-AL00C00B162, update to a version later than Barca-AL00C00B162. For P10 Plus versions earlier than Barca-TL00C00B162, update to a version later than Barca-TL00C00B162. For Toronto Huawei smart phones versions earlier than EVA-AL10C00B396SP03, update to a version later than EVA-AL10C00B396SP03. For Toronto Huawei smart phones versions earlier than EVA-CL00C92B396, update to a version later than EVA-CL00C92B396. For Toronto Huawei smart phones versions earlier than EVA-DL00C17B396, update to a version later than EVA-DL00C17B396. For Toronto Huawei smart phones versions earlier than EVA-TL00C01B396, update to a version later than EVA-TL00C01B396. For Toronto Huawei smart phones versions earlier than Vicky-AL00AC00B172, update to a version later than Vicky-AL00AC00B172. For Toronto Huawei smart phones versions earlier than Toronto-AL00AC00B191, update to a version later than Toronto-AL00AC00B191. For Toronto Huawei smart phones versions earlier than Toronto-TL10C01B191, update to a version later than Toronto-TL10C01B191.

Correção

Identificadores relacionados

CVE-2017-8215

Produtos afetados

Honor 8

Honor 9

Nova 2

Nova 2 Plus

P10 Plus

P9

Toronto

Referências · 3

• https://nvd.nist.gov/vuln/detail/CVE-2017-8215 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2017-8215 · Aviso do Fabricante
• http://huawei.com/en/psirt/security-advisories/huawei-sa-20170807-01-smartphone-en · Aviso do Fabricante