Read the docs
TI-2017-01969 Aliases CVE-2017-2727GHSA-7w3q-qffv-c74h

Huawei P9 smart phones with software versions earlier before EVA-AL00C00B365, versions…

Priority LOW 19Published · Updated

Key facts

Attack vector
Physical
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
Low · Low · Low
Fix status
No fix listed

Attack profile from CVSS 3.0 · NVD. Fix status from CNA.

Summary

Huawei P9 smart phones with software versions earlier before EVA-AL00C00B365, versions earlier before EVA-AL10C00B365,Versions earlier before EVA-CL00C92B365, versions earlier before EVA-DL00C17B365, versions earlier before EVA-TL00C01B365 have a privilege escalation vulnerability. An unauthenticated attacker can bypass phone activation to user management page of the phone and create a new user. Successful exploit could allow the attacker operate part function of the phone.

Why it matters now

EPSS 0.00221 12th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
HuaweiHuawei P9Versions earlier before EVA-AL00C00B365,Versions earlier before EVA-AL10C00B365,Versions earlier before EVA-CL00C92B365,Versions earlier before EVA-DL00C17B365,Versions earlier before EVA-TL00C01B365,,—No fix listedCNA
  • Huawei P9 VendorHuawei Affected Versions earlier before EVA-AL00C00B365,Versions earlier before EVA-AL10C00B365,Versions earlier before EVA-CL00C92B365,Versions earlier before EVA-DL00C17B365,Versions earlier before EVA-TL00C01B365,, Fixed in — No fix listed CNA

CPE configurations NVD · 3

CPEVersionsRoleVendor
cpe:2.3:o:huawei:p9_firmware:*:*:*:*:*:*:*:*before eva-al00c00b365VulnerableHuawei
cpe:2.3:h:huawei:p9:-:*:*:*:*:*:*:*not specified by NVDRunning onHuawei
cpe:2.3:o:huawei:p9_firmware:*:*:*:*:*:*:*:*before eva-al10c00b365; before eva-cl00c92b365; before eva-dl00c17b365; before eva-tl00c01b365VulnerableHuawei
  • cpe:2.3:o:huawei:p9_firmware:*:*:*:*:*:*:*:* Versions before eva-al00c00b365 Vulnerable ·Huawei
  • cpe:2.3:h:huawei:p9:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei
  • cpe:2.3:o:huawei:p9_firmware:*:*:*:*:*:*:*:* Versions before eva-al10c00b365; before eva-cl00c92b365; before eva-dl00c17b365; before eva-tl00c01b365 Vulnerable ·Huawei

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2017-2727
  2. 2026-10-03 Alias added: GHSA-7w3q-qffv-c74h

References

Advisory 1

  • TI-2017-05725 Memory corruption in Huawei P10, P10 Plus CVSS 3.0HIGH 7.8
  • TI-2016-07216 Memory corruption in P9,Honor 6 Versions before EVA-AL10C00B192,Versions before… CVSS 3.0HIGH 7.8
  • TI-2016-07215 Memory corruption in P9,Honor 6 Versions before EVA-AL10C00B192,Versions before… CVSS 3.0HIGH 7.8
  • TI-2016-07214 Memory corruption in P9,Honor 6 Versions before EVA-AL10C00B192,Versions before… CVSS 3.0HIGH 7.8
  • TI-2016-07218 The TrustZone driver in Huawei P9 phones with software Versions earlier than… CVSS 3.0HIGH 7.8
  • TI-2017-01945 Phone Finder in versions earlier before MHA-AL00BC00B156,Versions earlier before… CVSS 3.0MEDIUM 6.8
See all 19 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences