TI-2017-01943 Aliases CVE-2017-2701 GHSA-27qc-3c4c-hwfw

Insufficient verification of data authenticity in Huawei Mate 9

LOW 16CWE-345Published 2017-11-22 · Updated 2024-09-17

Key facts

Attack vector: Local
Privileges required: None
User interaction: Required
Attack complexity: Low
Impact type: Security bypass
Confidentiality · integrity · availability: None · None · Low
Fix status: No fix listed

Attack profile from CVSS 3.0 · NVD. Fix status from CNA. Impact type from CWE-345.

Summary

Mate 9 with software MHA-AL00AC00B125 has a denial of service (DoS) vulnerability. An attacker tricks a user into installing a malicious application. Since the system does not verify the broadcasting message from the application, it could be exploited to cause some functions of system unavailable.

Why it matters now

EPSS 0.00297 22nd percentileScored 2026-11-07

Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
Huawei	Mate 9	MHA-AL00AC00B125	—	No fix listed	CNA

Mate 9 VendorHuawei Affected MHA-AL00AC00B125 Fixed in — No fix listed CNA

CPE configurations NVD · 2

CPE	Versions	Role	Vendor
cpe:2.3:o:huawei:mate_9_firmware:mha-al00ac00b125:::::::*	mha-al00ac00b125	Vulnerable	Huawei
cpe:2.3:h:huawei:mate_9:-:::::::*	not specified by NVD	Running on	Huawei

cpe:2.3:o:huawei:mate_9_firmware:mha-al00ac00b125:*:*:*:*:*:*:* Versions mha-al00ac00b125 Vulnerable ·Huawei
cpe:2.3:h:huawei:mate_9:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei

Remediation

No fixed version listed by the sources yet.

Timeline

2026-10-02 Threatist record created from CVE-2017-2701
2026-10-03 Alias added: GHSA-27qc-3c4c-hwfw

References

Advisory 1

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170802-01-broadcasting-en

TI-2017-11224 Memory corruption in Huawei Mate 10 CVSS 3.0HIGH 8.8
TI-2017-11229 Double free in Huawei Mate 9 CVSS 3.0HIGH 7.8
TI-2017-05717 Use after free in Huawei Mate 9, Mate 9 Pro CVSS 3.0HIGH 7.8
TI-2017-01958 Memory corruption in Huawei Mate 9 CVSS 3.0HIGH 7.8
TI-2017-01948 Path traversal in Huawei Mate 9 CVSS 3.0HIGH 7.1
TI-2017-01949 Mate 9 smartphones with software MHA-AL00AC00B125 have a privilege escalation… CVSS 3.0HIGH 7.1

See all 16 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences