Lucene search

K
huaweiHuawei TechnologiesHUAWEI-SA-20170118-05-SMARTPHONE
HistoryJan 18, 2017 - 12:00 a.m.

Security Advisory - Phone Finder Bypass Vulnerability in Huawei Smart Phones

2017-01-1800:00:00
Huawei Technologies
www.huawei.com
15

7.2 High

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

6.8 Medium

CVSS3

Attack Vector

PHYSICAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

0.001 Low

EPSS

Percentile

27.3%

Phone Finder is a Huawei security method that was designed to make sure someone can’t just wipe and factory reset the phone if user lost it or it was stolen. The Phone Finder in some Huawei smart phones can be bypass. An attacker can bypass the Phone Finder by special steps and enter the System Setting. (Vulnerability ID: HWPSIRT-2016-12002)

This vulnerability has been assigned a Common Vulnerabilities and Exposures (CVE) ID: CVE-2017-2703.

Huawei has released software updates to fix this vulnerability. This advisory is available at the following link:

<http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170118-05-smartphone-en&gt;

Affected configurations

Vulners
Node
huaweimate_9_proMatchmha-al00bc00b156
OR
huaweimate_9_proMatchmha-cl00bc00b156
OR
huaweimate_9_proMatchmha-dl00bc00b156
OR
huaweimate_9_proMatchmha-tl00bc00b156
OR
huaweip9Matcheva-al10c00b373
OR
huaweip9Matcheva-cl10c00b373
OR
huaweip9Matcheva-dl10c00b373
OR
huaweip9Matcheva-tl10c00b373

7.2 High

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

6.8 Medium

CVSS3

Attack Vector

PHYSICAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

0.001 Low

EPSS

Percentile

27.3%

Related for HUAWEI-SA-20170118-05-SMARTPHONE