CVE Feed

    Dashboard / CVE / CVE-2017-8215

    CVE-2017-8215

    Honor 8,Honor V8,Honor 9,Honor V9,Nova 2,Nova 2 Plus,P9,P10 Plus,Toronto Huawei smart phones with software of versions earlier than FRD-AL00C00B391, versions earlier than FRD-DL00C00B391, versions earlier than KNT-AL10C00B391, versions earlier than KNT-AL20C00B391, versions earlier than KNT-UL10C00B391, versions earlier than KNT-TL10C00B391, versions earlier than Stanford-AL00C00B175, versions earlier than Stanford-AL10C00B175, versions earlier than Stanford-TL00C01B175, versions earlier than Duke-AL20C00B191, versions earlier than Duke-TL30C01B191, versions earlier than Picasso-AL00C00B162, versions earlier than Picasso-TL00C01B162 , versions earlier than Barca-AL00C00B162, versions earlier than Barca-TL00C00B162, versions earlier than EVA-AL10C00B396SP03, versions earlier than EVA-CL00C92B396, versions earlier than EVA-DL00C17B396, versions earlier than EVA-TL00C01B396 , versions earlier than Vicky-AL00AC00B172, versions earlier than Toronto-AL00AC00B191, versions earlier than Toronto-TL10C01B191 have a permission control vulnerability. An attacker with the system privilege of a mobile can exploit this vulnerability to bypass the unlock code verification and unlock the mobile phone bootloader.

    Published:Nov 22, 2017
    Last Modified:Apr 20, 2025
    EPS:Nov 22, 2017
    EPSS Score:0.00019
    CVSS Score:6.2

    Affected Products

    Vendor
    Huawei
    Product
    Honor 8
    Vendor
    Huawei
    Product
    Honor 8 Firmware
    Vendor
    Huawei
    Product
    Honor 9
    Vendor
    Huawei
    Product
    Honor 9 Firmware
    Vendor
    Huawei
    Product
    Honor V8
    Vendor
    Huawei
    Product
    Honor V8 Firmware
    Vendor
    Huawei
    Product
    Honor V9
    Vendor
    Huawei
    Product
    Honor V9 Firmware
    Vendor
    Huawei
    Product
    Nova 2
    Vendor
    Huawei
    Product
    Nova 2 Firmware
    Vendor
    Huawei
    Product
    Nova 2 Plus
    Vendor
    Huawei
    Product
    Nova 2 Plus Firmware
    Vendor
    Huawei
    Product
    P10 Plus
    Vendor
    Huawei
    Product
    P10 Plus Firmware
    Vendor
    Huawei
    Product
    P9
    Vendor
    Huawei
    Product
    P9 Firmware
    Vendor
    Huawei
    Product
    Toronto
    Vendor
    Huawei
    Product
    Toronto Firmware

    Exploits

    No exploit reference

    Common Weakness Enumeration

    No CWE recorded yet

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High