CVE-2017-8214

Name: CVE-2017-8214
Creator: NVD / NIST
Published: 2017-11-22T19:29:05.523+00:00
License: https://creativecommons.org/publicdomain/zero/1.0/

UnknownEPSS 0.27%

Last modified Jun 17, 2026

CVE-2017-8214 is a vulnerability of currently unknown severity. Honor 8,Honor V8,Honor 9,Honor V9,Nova 2,Nova 2 Plus,P9,P10 Plus,Toronto Huawei smart phones with software of versions earlier than FRD-AL00C00B391, versions earlier than FRD-DL00C00B391, versions earlier than KNT-AL10C00B391, versions earlier than KNT-AL20C00B391, versions earlier than KNT-UL10C00B391, versions earlier than KNT-TL10C00B391, versions earlier than Stanford-AL00C00B175, versions earlier than Stanford-AL10C00B175, versions earlier than Stanford-TL00C01B175, versions earlier than Duke-AL20C00B191, versions earlier than Duke-TL30C01B191, versions earlier than Picasso-AL00C00B162, versions earlier than Picasso-TL00C01B162 , versions earlier than Barca-AL00C00B162, versions earlier than Barca-TL00C00B162, versions earlier than EVA-AL10C00B396SP03, versions earlier than EVA-CL00C92B396, versions earlier than EVA-DL00C17B396, versions earlier than EVA-TL00C01B396 , versions earlier than Vicky-AL00AC00B172, versions earlier than Toronto-AL00AC00B191, versions earlier than Toronto-TL10C01B191 have an unlock code verification bypassing vulnerability. An attacker with the root privilege of a mobile can exploit this vulnerability to bypass the unlock code verification and unlock the mobile phone bootloader.. EPSS estimates a 0.27% chance of exploitation in the next 30 days.

Description

Honor 8,Honor V8,Honor 9,Honor V9,Nova 2,Nova 2 Plus,P9,P10 Plus,Toronto Huawei smart phones with software of versions earlier than FRD-AL00C00B391, versions earlier than FRD-DL00C00B391, versions earlier than KNT-AL10C00B391, versions earlier than KNT-AL20C00B391, versions earlier than KNT-UL10C00B391, versions earlier than KNT-TL10C00B391, versions earlier than Stanford-AL00C00B175, versions earlier than Stanford-AL10C00B175, versions earlier than Stanford-TL00C01B175, versions earlier than Duke-AL20C00B191, versions earlier than Duke-TL30C01B191, versions earlier than Picasso-AL00C00B162, versions earlier than Picasso-TL00C01B162 , versions earlier than Barca-AL00C00B162, versions earlier than Barca-TL00C00B162, versions earlier than EVA-AL10C00B396SP03, versions earlier than EVA-CL00C92B396, versions earlier than EVA-DL00C17B396, versions earlier than EVA-TL00C01B396 , versions earlier than Vicky-AL00AC00B172, versions earlier than Toronto-AL00AC00B191, versions earlier than Toronto-TL10C01B191 have an unlock code verification bypassing vulnerability. An attacker with the root privilege of a mobile can exploit this vulnerability to bypass the unlock code verification and unlock the mobile phone bootloader.

Metrics

EPSS Probability

0.27%

17.8th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

CWE-287

Affected Software

Vendor	Product	Versions
Huawei	Honor 8 Firmware	< frd-al00c00b391
Huawei	Honor 8 Firmware	< frd-dl00c00b391
Huawei	Honor V8 Firmware	< knt-al10c00b391
Huawei	Honor V8 Firmware	< knt-al20c00b391
Huawei	Honor V8 Firmware	< knt-ul10c00b391
Huawei	Honor V8 Firmware	< knt-tl10c00b391
Huawei	Honor 9 Firmware	< stanford-al00c00b175
Huawei	Honor 9 Firmware	< stanford-al10c00b175
Huawei	Honor 9 Firmware	< stanford-tl00c01b175
Huawei	Honor V9 Firmware	< duke-al20c00b191
Huawei	Honor V9 Firmware	< duke-tl30c01b191
Huawei	Nova 2 Firmware	< picasso-al00c00b162
Huawei	Nova 2 Firmware	< picasso-tl00c01b162
Huawei	Nova 2 Plus Firmware	< barca-al00c00b162
Huawei	Nova 2 Plus Firmware	< barca-tl00c00b162
Huawei	P9 Firmware	< eva-al10c00b396sp03
Huawei	P9 Firmware	< eva-cl00c92b396
Huawei	P9 Firmware	< eva-dl00c17b396
Huawei	P9 Firmware	< eva-tl00c01b396
Huawei	P10 Plus Firmware	< vicky-al00ac00b172
Huawei	Toronto Firmware	< toronto-al00ac00b191
Huawei	Toronto Firmware	< toronto-tl10c01b191

References

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170807-01-smartphone-enIssue Tracking, Vendor Advisory
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170807-01-smartphone-enIssue Tracking, Vendor Advisory

Timeline

Published: Nov 22, 2017
Last Modified: Jun 17, 2026
Status: Modified

Frequently Asked Questions

What is CVE-2017-8214?

How severe is CVE-2017-8214?

Severity scoring for CVE-2017-8214 is pending analysis. The EPSS model estimates a 0.27% probability of exploitation in the next 30 days.

How do I fix CVE-2017-8214?

Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2017-8214?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST