CVE-2017-2728

CVE-2017-2728 affects some Huawei smartphones, notably Honor 6X Berlin-L22C636B150 and earlier, where Bluetooth unlock can be bypassed when the Smart Unlock feature is enabled. The root cause is a lack of validation of Bluetooth devices, allowing an attacker to impersonate the user’s Bluetooth de...

CVE-2017-8206

CVE-2017-8206 concerns Huawei/Honor 7 Lite devices. The vulnerability is described as an App Lock bypass in the Phone Manager’s App Lock feature for software versions earlier than NEM-L21C432B352, enabling an attacker to temporarily access apps on a target device. Affected product: HONOR 7 Lite (...

CVE-2017-2702

The CVE-2017-2702 entry is supported by multiple connected documents confirming a vulnerability in Huawei smartphones (notably Mate 9) where the Phone Finder feature can be bypassed in versions earlier than MHA-AL00C00B170. An attacker can bypass Phone Finder and obtain the phone owner privileges...

CVE-2017-2731

CVE-2017-2731 affects Huawei smartphone models with the vibrator service prior to VIE-AL10C00B386. Root cause: lack of parameter validation in the vibrator interface, enabling a malicious app install to trigger a DoS and crash the system. Impact: local DoS with system instability; exploitation re...

CVE-2017-2702

Phone Finder in versions earlier before MHA-AL00C00B170 can be bypass. An attacker can bypass the Phone Finder by special steps and obtain the owner of the phone...

CVE-2017-2708

The 'Find Phone' function in Nice smartphones with software versions earlier before Nice-AL00C00B0135 has an authentication bypass vulnerability. An unauthenticated attacker may wipe and factory reset the phone by special steps. Due to missing authentication of the 'Find Phone' function, an...

CVE-2017-8166

Huawei mobile phones Honor V9 with the software versions before Duke-AL20C00B195 have an App Lock bypass vulnerability. An attacker could perform specific operations to bypass the App Lock to use apps on a target mobile phone...

CVE-2017-2697

The goldeneye driver in NMO-L31C432B120 and earlier versions,NEM-L21C432B100 and earlier versions,NEM-L51C432B120 and earlier versions,KNT-AL10C746B160 and earlier versions,VNS-L21C185B142 and earlier versions,CAM-L21C10B130 and earlier versions,CAM-L21C185B141 and earlier versions has buffer...

CVE-2017-2723

The CVE-2017-2723 entry concerns Huawei’s Files APP (versions 7.1.1.308 and earlier). The vulnerability is plaintext storage of users’ Safe passwords, exploitable by an attacker with root privileges on an Android system to forge the Safe and read plaintext passwords, resulting in information leak...

CVE-2017-8204

The CVE-2017-8204 entry concerns the Bastet driver in Huawei Honor 9 smartphones (pre-STANFORD-AL10C00B175). The vulnerability is a buffer overflow caused by insufficient parameter validation in the Bastet driver, enabling arbitrary code execution when a user installs a malicious app with root pr...

CVE-2017-8152

CVE-2017-8152 affects Huawei Honor 5S devices running software before TAG-TL00C01B173. The FRP (Factory Reset Protection) bypass is due to an improper design that lets an attacker access the factory reset page without authorization by dialing a special code. According to the NVD metrics, the atta...

CVE-2017-2705

Huawei P9 smartphones with software versions earlier before EVA-AL10C00B365, versions earlier before EVA-AL00C00B365, versions earlier before EVA-CL00C92B365, versions earlier before EVA-DL00C17B365, versions earlier before EVA-TL00C01B365 have a phone activation bypass vulnerability. Successful...

CVE-2017-8202

The CVE-2017-8202 issue affects Huawei smartphones with CameraISP driver prior to Prague-[builds listed in the description]. It is a buffer overflow caused by missing parameter validation in the CameraISP driver. An attacker tricks a user into installing a malicious app that sends a crafted param...

CVE-2017-2709

CVE-2017-2709 affects Huawei HiGame (pre-7.3.0) and SkyTone (pre-8.1.1) apps. The vulnerability stems from insufficient input validation in/core apps that process malformed packets, enabling a denial-of-service when a user installs a malicious application. Impact is DoS on affected devices; no in...

CVE-2017-2703

Huawei Phone Finder bypass CVE-2017-2703 affects multiple Huawei smartphone models (e.g., MHA-AL00, MHA-CL00, MHA-DL00, MHA-TL00, EVA-AL10/CL10/DL10/TL10, EVA-DL10, etc.). The root cause is a bypass of the Phone Finder security feature, allowing an attacker to access System Settings via specific ...

CVE-2017-8151

Huawei Honor 5S smart phones with software the versions before TAG-TL00C01B173 have an authentication bypass vulnerability due to the improper design of some components. An attacker can get a user's smart phone and install malicious apps in the mobile phone, allowing the attacker to reset the...

CVE-2017-2727

Huawei P9 smart phones with software versions earlier before EVA-AL00C00B365, versions earlier before EVA-AL10C00B365,Versions earlier before EVA-CL00C92B365, versions earlier before EVA-DL00C17B365, versions earlier before EVA-TL00C01B365 have a privilege escalation vulnerability. An...

CVE-2017-2728

Some Huawei mobile phones Honor 6X Berlin-L22C636B150 and earlier versions have a Bluetooth unlock bypassing vulnerability. If a user has enabled the smart unlock function, an attacker can impersonate the user's Bluetooth device to unlock the user's mobile phone screen.uawei mobile phones have a...

CVE-2017-2703

Phone Finder in versions earlier before MHA-AL00BC00B156,Versions earlier before MHA-CL00BC00B156,Versions earlier before MHA-DL00BC00B156,Versions earlier before MHA-TL00BC00B156,Versions earlier before EVA-AL10C00B373,Versions earlier before EVA-CL10C00B373,Versions earlier before...

CVE-2017-2708

CVE-2017-2708 describes an authentication bypass in the Find Phone function of certain Huawei/Nice smartphones running versions earlier than Nice-AL00C00B0135. The underlying issue is missing authentication for the Find Phone feature, allowing an unauthenticated attacker to bypass the function an...