CVE-2017-8151: Huawei Honor 5s Firmware

Medium severity, CVSS 6.8. EPSS: 0.3% chance of exploitation in the next 30 days.

Huawei Honor 5S smart phones with software the versions before TAG-TL00C01B173 have an authentication bypass vulnerability due to the improper design of some components. An attacker can get a user's smart phone and install malicious apps in the mobile phone, allowing the attacker to reset the password and fingerprint of the phone without authentication.

Affected products

• Huawei Honor 5s Firmware: before tag-tl00c01b173 (fixed in tag-tl00c01b173)

Published 2017-11-22. Last modified 2026-06-17.