CVE Feed

    Dashboard / CVE / CVE-2017-2727

    CVE-2017-2727

    Huawei P9 smart phones with software versions earlier before EVA-AL00C00B365, versions earlier before EVA-AL10C00B365,Versions earlier before EVA-CL00C92B365, versions earlier before EVA-DL00C17B365, versions earlier before EVA-TL00C01B365 have a privilege escalation vulnerability. An unauthenticated attacker can bypass phone activation to user management page of the phone and create a new user. Successful exploit could allow the attacker operate part function of the phone.

    Published:Nov 22, 2017
    Last Modified:Apr 20, 2025
    EPS:Nov 22, 2017
    EPSS Score:0.0003
    CVSS Score:4.3

    Affected Products

    Vendor
    Huawei
    Product
    P9
    Vendor
    Huawei
    Product
    P9 Firmware

    Exploits

    No exploit reference

    Common Weakness Enumeration

    No CWE recorded yet

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2017-17171 (CVSS 4.2) — Some Huawei smart phones have the denial of service (DoS) vulnerability due to the improper processing of mali…
    CVE-2017-17319 (CVSS 5.5) — Huawei P9 smartphones with the versions before EVA-AL10C00B399SP02 have an information disclosure vulnerabilit…
    CVE-2017-8215 (CVSS 6.2) — Honor 8,Honor V8,Honor 9,Honor V9,Nova 2,Nova 2 Plus,P9,P10 Plus,Toronto Huawei smart phones with software of …
    CVE-2017-2691 (CVSS 6.8) — Huawei P9 versions earlier before EVA-AL10C00B373, versions earlier before EVA-CL00C92B373, versions earlier b…
    CVE-2017-2713 (CVSS 5.4) — HUAWEI P9 smartphones with software versions earlier before EVA-L09C432B383, versions earlier before EVA-L09C6…
    CVE-2017-8148 (CVSS 4.7) — Audio driver in P9 smartphones with software The versions before EVA-AL10C00B389 has a denial of service (DoS)…
    CVE-2017-2703 (CVSS 6.8) — Phone Finder in versions earlier before MHA-AL00BC00B156,Versions earlier before MHA-CL00BC00B156,Versions ear…
    CVE-2017-2705 (CVSS 2.4) — Huawei P9 smartphones with software versions earlier before EVA-AL10C00B365, versions earlier before EVA-AL00C…
    CVE-2017-8150 (CVSS 7.8) — The boot loaders of P10 and P10 Plus Huawei mobile phones with software the versions before Victoria-L09AC605B…
    CVE-2017-8214 (CVSS 6.2) — Honor 8,Honor V8,Honor 9,Honor V9,Nova 2,Nova 2 Plus,P9,P10 Plus,Toronto Huawei smart phones with software of …

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High