CVE-2017-8215
Description
Honor 8,Honor V8,Honor 9,Honor V9,Nova 2,Nova 2 Plus,P9,P10 Plus,Toronto Huawei smart phones with software of versions earlier than FRD-AL00C00B391, versions earlier than FRD-DL00C00B391, versions earlier than KNT-AL10C00B391, versions earlier than KNT-AL20C00B391, versions earlier than KNT-UL10C00B391, versions earlier than KNT-TL10C00B391, versions earlier than Stanford-AL00C00B175, versions earlier than Stanford-AL10C00B175, versions earlier than Stanford-TL00C01B175, versions earlier than Duke-AL20C00B191, versions earlier than Duke-TL30C01B191, versions earlier than Picasso-AL00C00B162, versions earlier than Picasso-TL00C01B162 , versions earlier than Barca-AL00C00B162, versions earlier than Barca-TL00C00B162, versions earlier than EVA-AL10C00B396SP03, versions earlier than EVA-CL00C92B396, versions earlier than EVA-DL00C17B396, versions earlier than EVA-TL00C01B396 , versions earlier than Vicky-AL00AC00B172, versions earlier than Toronto-AL00AC00B191, versions earlier than Toronto-TL10C01B191 have a permission control vulnerability. An attacker with the system privilege of a mobile can exploit this vulnerability to bypass the unlock code verification and unlock the mobile phone bootloader.
How to fix
- huawei honor_8_firmwarefrd-al00c00b391, frd-dl00c00b391 or later
- huawei honor_v8_firmwareknt-al10c00b391, knt-al20c00b391, knt-ul10c00b391, knt-tl10c00b391 or later
- huawei honor_9_firmwarestanford-al00c00b175, stanford-al10c00b175, stanford-tl00c01b175 or later
- huawei honor_v9_firmwareduke-al20c00b191, duke-tl30c01b191 or later
- huawei nova_2_firmwarepicasso-al00c00b162, picasso-tl00c01b162 or later
- huawei nova_2_plus_firmwarebarca-al00c00b162, barca-tl00c00b162 or later
- huawei p9_firmwareeva-al10c00b396sp03, eva-cl00c92b396, eva-dl00c17b396, eva-tl00c01b396 or later
- huawei p10_plus_firmwarevicky-al00ac00b172 or later
- huawei toronto_firmwaretoronto-al00ac00b191, toronto-tl10c01b191 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| huawei honor_8_firmware | v < frd-al00c00b391, v < frd-dl00c00b391 | frd-al00c00b391, frd-dl00c00b391 |
| huawei honor_v8_firmware | v < knt-al10c00b391, v < knt-al20c00b391, v < knt-ul10c00b391, v < knt-tl10c00b391 | knt-al10c00b391, knt-al20c00b391, knt-ul10c00b391, knt-tl10c00b391 |
| huawei honor_9_firmware | v < stanford-al00c00b175, v < stanford-al10c00b175, v < stanford-tl00c01b175 | stanford-al00c00b175, stanford-al10c00b175, stanford-tl00c01b175 |
| huawei honor_v9_firmware | v < duke-al20c00b191, v < duke-tl30c01b191 | duke-al20c00b191, duke-tl30c01b191 |
| huawei nova_2_firmware | v < picasso-al00c00b162, v < picasso-tl00c01b162 | picasso-al00c00b162, picasso-tl00c01b162 |
| huawei nova_2_plus_firmware | v < barca-al00c00b162, v < barca-tl00c00b162 | barca-al00c00b162, barca-tl00c00b162 |
| huawei p9_firmware | v < eva-al10c00b396sp03, v < eva-cl00c92b396, v < eva-dl00c17b396, v < eva-tl00c01b396 | eva-al10c00b396sp03, eva-cl00c92b396, eva-dl00c17b396, eva-tl00c01b396 |
| huawei p10_plus_firmware | v < vicky-al00ac00b172 | vicky-al00ac00b172 |
| huawei toronto_firmware | v < toronto-al00ac00b191, v < toronto-tl10c01b191 | toronto-al00ac00b191, toronto-tl10c01b191 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.