CVE-2017-2703

low-risk
Published 2017-11-22

Phone Finder in versions earlier before MHA-AL00BC00B156,Versions earlier before MHA-CL00BC00B156,Versions earlier before MHA-DL00BC00B156,Versions earlier before MHA-TL00BC00B156,Versions earlier before EVA-AL10C00B373,Versions earlier before EVA-CL10C00B373,Versions earlier before EVA-DL10C00B373,Versions earlier before EVA-TL10C00B373 can be bypass. An attacker can bypass the Phone Finder by special steps and enter the System Setting.

Do I need to act?

-
0.02% chance of exploitation
EPSS score — low exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
6
CVSS 6.8/10 Medium
PHYSICAL / LOW complexity

Affected Products (2)

Mate 9 Firmware

Affected Vendors

Huawei

References (4)

Issue Tracking http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170118-05-smartph...
Third Party Advisory http://www.securityfocus.com/bid/95657
Issue Tracking http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170118-05-smartph...
Third Party Advisory http://www.securityfocus.com/bid/95657
29
/ 100
low-risk
Severity 22/34 · High
Exploitability 0/34 · Minimal
Exposure 7/34 · Low