Huawei P9 versions earlier before EVA-AL10C00B373, versions earlier before…
Priority LOW 30Published · Updated
Key facts
- Attack vector
- Physical
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- —
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- No fix listed
Attack profile from CVSS 3.0 · NVD. Fix status from CNA.
Summary
Huawei P9 versions earlier before EVA-AL10C00B373, versions earlier before EVA-CL00C92B373, versions earlier before EVA-DL00C17B373, versions earlier before EVA-TL00C01B373 have a lock-screen bypass vulnerability. An unauthenticated attacker could force the phone to the fastboot mode and delete the user's password file during the reboot process, then login the phone without screen lock password after reboot.
Why it matters now
EPSS 0.00284 21st percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Huawei | Huawei P9 | Versions earlier before EVA-AL10C00B373, Versions earlier before EVA-CL00C92B373, Versions earlier before EVA-DL00C17B373, Versions earlier before EVA-TL00C01B373, | — | No fix listed | CNA |
- Huawei P9 VendorHuawei Affected Versions earlier before EVA-AL10C00B373, Versions earlier before EVA-CL00C92B373, Versions earlier before EVA-DL00C17B373, Versions earlier before EVA-TL00C01B373, Fixed in — No fix listed CNA
CPE configurations NVD · 3
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:huawei:p9_firmware:*:*:*:*:*:*:*:* | before eva-tl00c01b373 | Vulnerable | Huawei |
| cpe:2.3:h:huawei:p9:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Huawei |
| cpe:2.3:o:huawei:p9_firmware:*:*:*:*:*:*:*:* | before eva-dl00c17b373; before eva-cl00c92b373; before eva-al10c00b373 | Vulnerable | Huawei |
- cpe:2.3:o:huawei:p9_firmware:*:*:*:*:*:*:*:* Versions before eva-tl00c01b373 Vulnerable ·Huawei
- cpe:2.3:h:huawei:p9:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei
- cpe:2.3:o:huawei:p9_firmware:*:*:*:*:*:*:*:* Versions before eva-dl00c17b373; before eva-cl00c92b373; before eva-al10c00b373 Vulnerable ·Huawei
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2017-2691
- 2026-10-03 Alias added: GHSA-mf6g-r32j-f7qw
References
More Huawei P9 Firmware vulnerabilities
- TI-2017-05725 Memory corruption in Huawei P10, P10 Plus CVSS 3.0HIGH 7.8
- TI-2016-07216 Memory corruption in P9,Honor 6 Versions before EVA-AL10C00B192,Versions before… CVSS 3.0HIGH 7.8
- TI-2016-07215 Memory corruption in P9,Honor 6 Versions before EVA-AL10C00B192,Versions before… CVSS 3.0HIGH 7.8
- TI-2016-07214 Memory corruption in P9,Honor 6 Versions before EVA-AL10C00B192,Versions before… CVSS 3.0HIGH 7.8
- TI-2016-07218 The TrustZone driver in Huawei P9 phones with software Versions earlier than… CVSS 3.0HIGH 7.8
- TI-2017-01945 Phone Finder in versions earlier before MHA-AL00BC00B156,Versions earlier before… CVSS 3.0MEDIUM 6.8
Sources
- CVE-2017-2691 · CVE Program
- CVE-2017-2691 · NVD
- FIRST EPSS
- GHSA-mf6g-r32j-f7qw · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences