CVE-2017-2703

Name: CVE-2017-2703
Creator: NVD / NIST
Published: 2017-11-22T19:29:00.693+00:00
License: https://creativecommons.org/publicdomain/zero/1.0/

UnknownEPSS 0.28%

Last modified Jun 17, 2026

CVE-2017-2703 is a vulnerability of currently unknown severity. Phone Finder in versions earlier before MHA-AL00BC00B156,Versions earlier before MHA-CL00BC00B156,Versions earlier before MHA-DL00BC00B156,Versions earlier before MHA-TL00BC00B156,Versions earlier before EVA-AL10C00B373,Versions earlier before EVA-CL10C00B373,Versions earlier before EVA-DL10C00B373,Versions earlier before EVA-TL10C00B373 can be bypass. An attacker can bypass the Phone Finder by special steps and enter the System Setting.. EPSS estimates a 0.28% chance of exploitation in the next 30 days.

Description

Phone Finder in versions earlier before MHA-AL00BC00B156,Versions earlier before MHA-CL00BC00B156,Versions earlier before MHA-DL00BC00B156,Versions earlier before MHA-TL00BC00B156,Versions earlier before EVA-AL10C00B373,Versions earlier before EVA-CL10C00B373,Versions earlier before EVA-DL10C00B373,Versions earlier before EVA-TL10C00B373 can be bypass. An attacker can bypass the Phone Finder by special steps and enter the System Setting.

Metrics

EPSS Probability

0.28%

19.3th percentile

Probability of exploitation in the next 30 days. Learn more

Affected Software

Vendor	Product	Versions
Huawei	Mate 9 Firmware	< mha-al00bc00b156
Huawei	Mate 9 Firmware	< mha-cl00bc00b156
Huawei	Mate 9 Firmware	< mha-dl00bc00b156
Huawei	Mate 9 Firmware	< mha-tl00bc00b156
Huawei	P9 Firmware	< eva-al10c00b373
Huawei	P9 Firmware	< eva-cl10c00b373
Huawei	P9 Firmware	< eva-dl10c00b373
Huawei	P9 Firmware	< eva-tl10c00b373

References

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170118-05-smartphone-enIssue Tracking, Vendor Advisory
http://www.securityfocus.com/bid/95657Third Party Advisory, VDB Entry
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170118-05-smartphone-enIssue Tracking, Vendor Advisory
http://www.securityfocus.com/bid/95657Third Party Advisory, VDB Entry

Timeline

Published: Nov 22, 2017
Last Modified: Jun 17, 2026
Status: Modified

Frequently Asked Questions

What is CVE-2017-2703?

How severe is CVE-2017-2703?

Severity scoring for CVE-2017-2703 is pending analysis. The EPSS model estimates a 0.28% probability of exploitation in the next 30 days.

How do I fix CVE-2017-2703?

Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2017-2703?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST