CVE-2016-8776 Auth bypass in P9, P9 Lite EVA-AL10C00,EVA-CL10C00,EVA-DL10C00,EVA-TL10C00,VNS-L21C185,
Attackers can bypass factory reset protection on Huawei P9 devices to access modules and update Google accounts without authorization.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2016-8776?
CVE-2016-8776 is a medium-severity authentication bypass vulnerability in P9, P9 Lite EVA-AL10C00,EVA-CL10C00,EVA-DL10C00,EVA-TL10C00,VNS-L21C185,, published on 2 Apr 2017. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
Huawei P9 phones with software EVA-AL10C00,EVA-CL10C00,EVA-DL10C00,EVA-TL10C00 and P9 Lite phones with software VNS-L21C185 allow attackers to bypass the factory reset protection (FRP) to enter some functional modules without authorization and perform operations to update the Google account.
Weakness: CWE-285
Which versions are affected by CVE-2016-8776?
It affects 2 products.
Products include Huawei P9 Firmware, Huawei P9 Lite Firmware.
How do I fix CVE-2016-8776?
No fix has been published for CVE-2016-8776 yet. Limit exposure of the affected software until one is available.
Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.
Is CVE-2016-8776 being exploited?
There is no known exploitation of CVE-2016-8776 in the wild and no public exploit code.
Public exploit code: 1 proofs of concept on GitHub.
Other vulnerabilities in P9, P9 Lite EVA-AL10C00,EVA-CL10C00,EVA-DL10C00,EVA-TL10C00,VNS-L21C185,
Sources
Also known as GHSA-vc8h-576h-jh5w.