Read the docs
TI-2017-05748 Aliases CVE-2017-8173GHSA-j42q-mr6r-qh9r

Maya-L02,VKY-L09,VTR-L29,Vicky-AL00A,Victoria-AL00A,Warsaw-AL00 smart phones with…

Priority LOW 21Published · Updated

Key facts

Attack vector
Physical
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
None · High · None
Fix status
No fix listed

Attack profile from CVSS 3.0 · NVD. Fix status from CNA.

Summary

Maya-L02,VKY-L09,VTR-L29,Vicky-AL00A,Victoria-AL00A,Warsaw-AL00 smart phones with software of earlier than Maya-L02C636B126 versions,earlier than VKY-L29C10B151 versions,earlier than VTR-L29C10B151 versions,earlier than Vicky-AL00AC00B162 versions,earlier than Victoria-AL00AC00B167 versions,earlier than Warsaw-AL00C00B200 versions have a Factory Reset Protection (FRP) bypass security vulnerability. When re-configuring the mobile phone using the factory reset protection (FRP) function, an attacker can login the configuration flow by some secret code and can perform some operations to update the Google account. As a result, the FRP function is bypassed.

Why it matters now

EPSS 0.00224 13th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
HuaweiMaya-L02,VKY-L09,VTR-L29,Vicky-AL00A,Victoria-AL00A,Warsaw-AL00Earlier than Maya-L02C636B126 versions,Earlier than VKY-L29C10B151 versions,Earlier than VTR-L29C10B151 versions,Earlier than Vicky-AL00AC00B162 versions,Earlier than Victoria-AL00AC00B167 versions,Earlier than Warsaw-AL00C00B200 versions—No fix listedCNA
  • Maya-L02,VKY-L09,VTR-L29,Vicky-AL00A,Victoria-AL00A,Warsaw-AL00 VendorHuawei Affected Earlier than Maya-L02C636B126 versions,Earlier than VKY-L29C10B151 versions,Earlier than VTR-L29C10B151 versions,Earlier than Vicky-AL00AC00B162 versions,Earlier than Victoria-AL00AC00B167 versions,Earlier than Warsaw-AL00C00B200 versions Fixed in — No fix listed CNA

CPE configurations NVD · 12

CPEVersionsRoleVendor
cpe:2.3:o:huawei:maya-l02_firmware:*:*:*:*:*:*:*:*before maya-l02c636b126VulnerableHuawei
cpe:2.3:h:huawei:maya-l02:-:*:*:*:*:*:*:*not specified by NVDRunning onHuawei
cpe:2.3:o:huawei:vky-l09_firmware:*:*:*:*:*:*:*:*before vky-l29c10b151VulnerableHuawei
cpe:2.3:h:huawei:vky-l09:-:*:*:*:*:*:*:*not specified by NVDRunning onHuawei
cpe:2.3:o:huawei:vky-l29_firmware:*:*:*:*:*:*:*:*before vtr-l29c10b151VulnerableHuawei
cpe:2.3:h:huawei:vky-l29:-:*:*:*:*:*:*:*not specified by NVDRunning onHuawei
cpe:2.3:o:huawei:vicky-al00a_firmware:*:*:*:*:*:*:*:*before vicky-al00ac00b162VulnerableHuawei
cpe:2.3:h:huawei:vicky-al00a:-:*:*:*:*:*:*:*not specified by NVDRunning onHuawei
cpe:2.3:o:huawei:victoria-al00a_firmware:*:*:*:*:*:*:*:*before victoria-al00ac00b167VulnerableHuawei
cpe:2.3:h:huawei:victoria-al00a:-:*:*:*:*:*:*:*not specified by NVDRunning onHuawei
  • cpe:2.3:o:huawei:maya-l02_firmware:*:*:*:*:*:*:*:* Versions before maya-l02c636b126 Vulnerable ·Huawei
  • cpe:2.3:h:huawei:maya-l02:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei
  • cpe:2.3:o:huawei:vky-l09_firmware:*:*:*:*:*:*:*:* Versions before vky-l29c10b151 Vulnerable ·Huawei
  • cpe:2.3:h:huawei:vky-l09:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei
  • cpe:2.3:o:huawei:vky-l29_firmware:*:*:*:*:*:*:*:* Versions before vtr-l29c10b151 Vulnerable ·Huawei
  • cpe:2.3:h:huawei:vky-l29:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei
  • cpe:2.3:o:huawei:vicky-al00a_firmware:*:*:*:*:*:*:*:* Versions before vicky-al00ac00b162 Vulnerable ·Huawei
  • cpe:2.3:h:huawei:vicky-al00a:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei
  • cpe:2.3:o:huawei:victoria-al00a_firmware:*:*:*:*:*:*:*:* Versions before victoria-al00ac00b167 Vulnerable ·Huawei
  • cpe:2.3:h:huawei:victoria-al00a:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei
Show 2 more CPE
CPEVersionsRoleVendor
cpe:2.3:o:huawei:warsaw-al00_firmware:*:*:*:*:*:*:*:*before warsaw-al00c00b200VulnerableHuawei
cpe:2.3:h:huawei:warsaw-al00:-:*:*:*:*:*:*:*not specified by NVDRunning onHuawei
  • cpe:2.3:o:huawei:warsaw-al00_firmware:*:*:*:*:*:*:*:* Versions before warsaw-al00c00b200 Vulnerable ·Huawei
  • cpe:2.3:h:huawei:warsaw-al00:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2017-8173
  2. 2026-10-03 Alias added: GHSA-j42q-mr6r-qh9r

References

Advisory 1

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences