Huawei P9 smartphones with software versions earlier before EVA-AL10C00B365, versions…
Priority LOW 12Published · Updated
Key facts
- Attack vector
- Physical
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- —
- Confidentiality · integrity · availability
- None · None · Low
- Fix status
- No fix listed
Attack profile from CVSS 3.0 · NVD. Fix status from CNA.
Summary
Huawei P9 smartphones with software versions earlier before EVA-AL10C00B365, versions earlier before EVA-AL00C00B365, versions earlier before EVA-CL00C92B365, versions earlier before EVA-DL00C17B365, versions earlier before EVA-TL00C01B365 have a phone activation bypass vulnerability. Successful exploit could allow an unauthenticated attacker to bypass phone activation to settings page of the phone.
Why it matters now
EPSS 0.00232 14th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Huawei | Huawei P9 | Versions earlier before EVA-AL10C00B365, Versions earlier before EVA-AL00C00B365, Versions earlier before EVA-CL00C92B365, Versions earlier before EVA-DL00C17B365, Versions earlier before EVA-TL00C01B365 | — | No fix listed | CNA |
- Huawei P9 VendorHuawei Affected Versions earlier before EVA-AL10C00B365, Versions earlier before EVA-AL00C00B365, Versions earlier before EVA-CL00C92B365, Versions earlier before EVA-DL00C17B365, Versions earlier before EVA-TL00C01B365 Fixed in — No fix listed CNA
CPE configurations NVD · 3
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:huawei:p9_firmware:*:*:*:*:*:*:*:* | before eva-al00c00b365 | Vulnerable | Huawei |
| cpe:2.3:h:huawei:p9:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Huawei |
| cpe:2.3:o:huawei:p9_firmware:*:*:*:*:*:*:*:* | before eva-al10c00b365; before eva-cl00c92b365; before eva-dl00c17b365; before eva-tl00c01b365 | Vulnerable | Huawei |
- cpe:2.3:o:huawei:p9_firmware:*:*:*:*:*:*:*:* Versions before eva-al00c00b365 Vulnerable ·Huawei
- cpe:2.3:h:huawei:p9:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei
- cpe:2.3:o:huawei:p9_firmware:*:*:*:*:*:*:*:* Versions before eva-al10c00b365; before eva-cl00c92b365; before eva-dl00c17b365; before eva-tl00c01b365 Vulnerable ·Huawei
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2017-2705
- 2026-10-03 Alias added: GHSA-3mfm-97cm-96cr
References
More Huawei P9 Firmware vulnerabilities
- TI-2017-05725 Memory corruption in Huawei P10, P10 Plus CVSS 3.0HIGH 7.8
- TI-2016-07216 Memory corruption in P9,Honor 6 Versions before EVA-AL10C00B192,Versions before… CVSS 3.0HIGH 7.8
- TI-2016-07215 Memory corruption in P9,Honor 6 Versions before EVA-AL10C00B192,Versions before… CVSS 3.0HIGH 7.8
- TI-2016-07214 Memory corruption in P9,Honor 6 Versions before EVA-AL10C00B192,Versions before… CVSS 3.0HIGH 7.8
- TI-2016-07218 The TrustZone driver in Huawei P9 phones with software Versions earlier than… CVSS 3.0HIGH 7.8
- TI-2017-01945 Phone Finder in versions earlier before MHA-AL00BC00B156,Versions earlier before… CVSS 3.0MEDIUM 6.8
Sources
- CVE-2017-2705 · CVE Program
- CVE-2017-2705 · NVD
- FIRST EPSS
- GHSA-3mfm-97cm-96cr · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences