CVE-2017-17145

Huawei Honor V9 Play smart phones with the versions before Jimmy-AL00AC00B135 have an authentication bypass vulnerability due to the improper design of a component. An attacker who get a user's smart phone can execute specific operation, and delete the fingerprint of the phone without authentication.

Score

CVSS 3.0 4.6 Medium

Status

Modified - psirt@huawei.com

Published

2018-03-09

Last modified

2024-08-05

Affected products

• Honor V9 Play Firmware (Huawei)

References

• http://www.huawei.com/en/psirt/security-advisories/2017/huawei-sa-20171213-03-smartphone-en