Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
6.8

Huawei Mate 9 and P9 firmware allows Phone Finder bypass

CVE-2017-2703 · published 8 years ago
Summary

Older versions of the Huawei Mate 9 and P9 firmware let a user skip the Phone Finder screen by using a special sequence of steps. Bypassing this check can give someone access to the device's system settings without proper authentication. Update the firmware to the latest release to block this shortcut.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
huawei mate_9_firmware < mha-al00bc00b156
< mha-cl00bc00b156
< mha-dl00bc00b156
< mha-tl00bc00b156
cpe:2.3:o:huawei:mate_9_firmware:*:*:*:*:*:*:*:*
huawei p9_firmware < eva-al10c00b373
< eva-cl10c00b373
< eva-dl10c00b373
< eva-tl10c00b373
cpe:2.3:o:huawei:p9_firmware:*:*:*:*:*:*:*:*
Original advisory text
Phone Finder in versions earlier before MHA-AL00BC00B156,Versions earlier before MHA-CL00BC00B156,Versions earlier before MHA-DL00BC00B156,Versions earlier before MHA-TL00BC00B156,Versions earlier ...
Phone Finder in versions earlier before MHA-AL00BC00B156,Versions earlier before MHA-CL00BC00B156,Versions earlier before MHA-DL00BC00B156,Versions earlier before MHA-TL00BC00B156,Versions earlier before EVA-AL10C00B373,Versions earlier before EVA-CL10C00B373,Versions earlier before EVA-DL10C00B373,Versions earlier before EVA-TL10C00B373 can be bypass. An attacker can bypass the Phone Finder by special steps and enter the System Setting.
References
Fix within
Internet-facing 14 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit (estimated)
  • Gives an attacker full control (estimated)
Severity
6.8 Medium
Exploitation
<1% chance of attack within 30 days
Timeline
Published22 Nov 2017
Updated3 Nov 2026
First seen29 Sep 2026
Sources
CVE-2017-2703 · NVD
Track software like this
Free during beta