CVE-2017-2727 Auth bypass in Huawei P9

Medium 4.3 Published 22 Nov 2017 Updated 16 Sep 2024

An unauthenticated attacker can bypass phone activation to access user management and create new users, leading to privilege escalation on Huawei P9 devices.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Local or same network only
Victim action needed: Not needed
Fix: None listed

What is CVE-2017-2727?

CVE-2017-2727 is a medium-severity authentication bypass vulnerability in Huawei P9, published on 22 Nov 2017. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

Huawei P9 smart phones with software versions earlier before EVA-AL00C00B365, versions earlier before EVA-AL10C00B365,Versions earlier before EVA-CL00C92B365, versions earlier before EVA-DL00C17B365, versions earlier before EVA-TL00C01B365 have a privilege escalation vulnerability. An unauthenticated attacker can bypass phone activation to user management page of the phone and create a new user. Successful exploit could allow the attacker operate part function of the phone.

Which versions are affected by CVE-2017-2727?

It affects 1 product.

Products include Huawei P9 Firmware.

How do I fix CVE-2017-2727?

No fix has been published for CVE-2017-2727 yet. Limit exposure of the affected software until one is available.

Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.

Is CVE-2017-2727 being exploited?

There is no known exploitation of CVE-2017-2727 in the wild and no public exploit code.

Sources

Also known as GHSA-7w3q-qffv-c74h.