CVE-2017-2713 Information disclosure in HUAWEI P9

What is CVE-2017-2713?

CVE-2017-2713 is a medium-severity vulnerability in HUAWEI P9, published on 22 Nov 2017. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

HUAWEI P9 smartphones with software versions earlier before EVA-L09C432B383, versions earlier before EVA-L09C636B380, versions earlier before VIE-L09C432B370, versions earlier before VIE-L29C636B370 have an insufficient input validation vulnerability. An attacker could exploit this vulnerability to tamper with air interface signaling messages and obtain some communication information.

Weakness: CWE-20

Which versions are affected by CVE-2017-2713?

It affects 1 product.

Products include Huawei P9 Firmware.

How do I fix CVE-2017-2713?

No fix has been published for CVE-2017-2713 yet. Limit exposure of the affected software until one is available.

Is CVE-2017-2713 being exploited?

There is no known exploitation of CVE-2017-2713 in the wild and no public exploit code.

Other vulnerabilities in HUAWEI P9

• CVE-2017-2691 Auth bypass in Huawei P9 Medium 6.8
• CVE-2017-17319 Information disclosure in P9 Medium 5.5
• CVE-2017-8148 Race condition in P9 Medium 4.7
• CVE-2016-8776 Auth bypass in P9, P9 Lite EVA-AL10C00,EVA-CL10C00,EVA-DL10C00,EVA-TL10C00,VNS-L21C185, Medium 4.6
• CVE-2017-2727 Auth bypass in Huawei P9 Medium 4.3

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-xgg3-h73q-j6q4.