PT-2018-5799 · Huawei · Honor 9

Published 2018-02-15 · Updated 2018-02-26 · CVE-2017-15351

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: Huawei Honor V9 play smartphones versions prior to Jimmy-AL00AC00B135

Description: The issue is related to an authentication bypass in the 'Find Phone' function due to improper authentication realization. This allows an attacker to bypass the 'Find Phone' function, enabling normal use of the phone.

Recommendations: For versions prior to Jimmy-AL00AC00B135, as a temporary workaround, consider disabling the 'Find Phone' function until a patch is available.

Fix

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2017-15351

Affected Products

Honor 9

References · 3

• http://huawei.com/en/psirt/security-advisories/huawei-sa-20171122-01-smartphone-en · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2017-15351 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-15351 · Security Note