CVE-2016-8776

Name: CVE-2016-8776
Creator: NVD / NIST
Published: 2017-04-02T20:59:01.5+00:00
License: https://creativecommons.org/publicdomain/zero/1.0/

UnknownEPSS 0.36%

Last modified Jun 17, 2026

CVE-2016-8776 is a vulnerability of currently unknown severity. Huawei P9 phones with software EVA-AL10C00,EVA-CL10C00,EVA-DL10C00,EVA-TL10C00 and P9 Lite phones with software VNS-L21C185 allow attackers to bypass the factory reset protection (FRP) to enter some functional modules without authorization and perform operations to update the Google account.. EPSS estimates a 0.36% chance of exploitation in the next 30 days.

Description

Huawei P9 phones with software EVA-AL10C00,EVA-CL10C00,EVA-DL10C00,EVA-TL10C00 and P9 Lite phones with software VNS-L21C185 allow attackers to bypass the factory reset protection (FRP) to enter some functional modules without authorization and perform operations to update the Google account.

Metrics

EPSS Probability

0.36%

27.8th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

CWE-285

Affected Software

Vendor	Product	Versions
Huawei	P9 Firmware	eva-al10c00
Huawei	P9 Firmware	eva-cl10c00
Huawei	P9 Firmware	eva-dl10c00
Huawei	P9 Firmware	eva-tl10c00
Huawei	P9 Lite Firmware	vns-l21c185

References

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20161207-01-smartphone-enVendor Advisory
http://www.securityfocus.com/bid/94836Third Party Advisory, VDB Entry
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20161207-01-smartphone-enVendor Advisory
http://www.securityfocus.com/bid/94836Third Party Advisory, VDB Entry

Timeline

Published: Apr 2, 2017
Last Modified: Jun 17, 2026
Status: Modified

Frequently Asked Questions

What is CVE-2016-8776?

How severe is CVE-2016-8776?

Severity scoring for CVE-2016-8776 is pending analysis. The EPSS model estimates a 0.36% probability of exploitation in the next 30 days.

How do I fix CVE-2016-8776?

Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2016-8776?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST