CVE-2017-2691: Huawei p9 Firmware

Medium severity, CVSS 6.8. EPSS: 0.3% chance of exploitation in the next 30 days.

Huawei P9 versions earlier before EVA-AL10C00B373, versions earlier before EVA-CL00C92B373, versions earlier before EVA-DL00C17B373, versions earlier before EVA-TL00C01B373 have a lock-screen bypass vulnerability. An unauthenticated attacker could force the phone to the fastboot mode and delete the user's password file during the reboot process, then login the phone without screen lock password after reboot.

Affected products

• Huawei p9 Firmware: before eva-tl00c01b373 (fixed in eva-tl00c01b373); before eva-dl00c17b373 (fixed in eva-dl00c17b373); before eva-cl00c92b373 (fixed in eva-cl00c92b373); before eva-al10c00b373 (fixed in eva-al10c00b373)

Published 2017-11-22. Last modified 2026-06-17.