Authentication flaw

2017-11-2219:29:00

PRIOn knowledge base

www.prio-n.com

6.6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

30.1%

JSON

Phone Finder in versions earlier before MHA-AL00C00B170 can be bypass. An attacker can bypass the Phone Finder by special steps and obtain the owner of the phone.

CPENameOperatorVersion
mate_9_firmwareeq< mha-al0c0b170

CPE	Name	Operator	Version
	mate_9_firmware	eq	< mha-al0c0b170

References

www.huawei.com/en/psirt/security-advisories/huawei-sa-20170322-01-smartphone-en