{"id": "CVE-2017-8215", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 7.2, "accessVector": "LOCAL", "vectorString": "AV:L/AC:L/Au:N/C:C/I:C/A:C", "authentication": "NONE", "integrityImpact": "COMPLETE", "accessComplexity": "LOW", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "acInsufInfo": false, "impactScore": 10.0, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 3.9, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV30": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.0", "baseScore": 6.2, "attackVector": "PHYSICAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:P/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "HIGH", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 0.3}]}, "published": "2017-11-22T19:29:05.617", "references": [{"url": "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170807-01-smartphone-en", "tags": ["Issue Tracking", "Vendor Advisory"], "source": "psirt@huawei.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-noinfo"}]}], "descriptions": [{"lang": "en", "value": "Honor 8,Honor V8,Honor 9,Honor V9,Nova 2,Nova 2 Plus,P9,P10 Plus,Toronto Huawei smart phones with software of versions earlier than FRD-AL00C00B391, versions earlier than FRD-DL00C00B391, versions earlier than KNT-AL10C00B391, versions earlier than KNT-AL20C00B391, versions earlier than KNT-UL10C00B391, versions earlier than KNT-TL10C00B391, versions earlier than Stanford-AL00C00B175, versions earlier than Stanford-AL10C00B175, versions earlier than Stanford-TL00C01B175, versions earlier than Duke-AL20C00B191, versions earlier than Duke-TL30C01B191, versions earlier than Picasso-AL00C00B162, versions earlier than Picasso-TL00C01B162 , versions earlier than Barca-AL00C00B162, versions earlier than Barca-TL00C00B162, versions earlier than EVA-AL10C00B396SP03, versions earlier than EVA-CL00C92B396, versions earlier than EVA-DL00C17B396, versions earlier than EVA-TL00C01B396 , versions earlier than Vicky-AL00AC00B172, versions earlier than Toronto-AL00AC00B191, versions earlier than Toronto-TL10C01B191 have a permission control vulnerability. An attacker with the system privilege of a mobile can exploit this vulnerability to bypass the unlock code verification and unlock the mobile phone bootloader."}, {"lang": "es", "value": "Los smartphones Huawei Honor 8, Honor V8, Honor 9, Honor V9, Nova 2, Nova 2 Plus, P9, P10 Plus y Toronto con versiones de software anteriores a FRD-AL00C00B391, FRD-DL00C00B391, KNT-AL10C00B391, KNT-AL20C00B391, KNT-UL10C00B391, KNT-TL10C00B391, Stanford-AL00C00B175, Stanford-AL10C00B175, Stanford-TL00C01B175, Duke-AL20C00B191, Duke-TL30C01B191, Picasso-AL00C00B162, Picasso-TL00C01B162 , Barca-AL00C00B162, Barca-TL00C00B162, EVA-AL10C00B396SP03, EVA-CL00C92B396, EVA-DL00C17B396, EVA-TL00C01B396 , Vicky-AL00AC00B172, Toronto-AL00AC00B191 y Toronto-TL10C01B191 tienen una vulnerabilidad de control de permisos. Un atacante con privilegios de sistema de un m\u00f3vil puede explotar esta vulnerabilidad para omitir la verificaci\u00f3n del c\u00f3digo de desbloqueo y desbloquear el cargador de arranque del tel\u00e9fono m\u00f3vil."}], "lastModified": "2019-10-03T00:03:26.223", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:huawei:honor_8_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "194C8907-447B-4DCF-B412-1213EF9F1B23", "versionEndExcluding": "frd-al00c00b391"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:huawei:honor_8:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "72889681-6793-4451-B97F-F12B4B28372A"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:huawei:honor_8_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "52F0EA2A-1026-41A4-84FF-0F9AE952ED07", "versionEndExcluding": "frd-dl00c00b391"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:huawei:honor_8:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "72889681-6793-4451-B97F-F12B4B28372A"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:huawei:honor_v8_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8726C588-5828-455A-BEE8-9DCC3F125F17", "versionEndExcluding": "knt-al10c00b391"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:huawei:honor_v8:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "61143255-9662-480E-BE01-07DB21B70D47"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:huawei:honor_v8_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "552AAA4E-B600-4CF9-B8A9-F1668F3D8A14", "versionEndExcluding": "knt-al20c00b391"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:huawei:honor_v8:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "61143255-9662-480E-BE01-07DB21B70D47"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:huawei:honor_v8_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "70ADD029-1A6E-41AD-8861-086DD06895BF", "versionEndExcluding": "knt-ul10c00b391"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:huawei:honor_v8:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "61143255-9662-480E-BE01-07DB21B70D47"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:huawei:honor_v8_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "426A0167-5C96-4FB8-B2B7-6F6DF9499321", "versionEndExcluding": "knt-tl10c00b391"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:huawei:honor_v8:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "61143255-9662-480E-BE01-07DB21B70D47"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:huawei:honor_9_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "39942200-B302-4029-8398-B91A874C4185", "versionEndExcluding": "stanford-al00c00b175"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:huawei:honor_9:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "804A493E-A0C3-41F7-AB1C-AE58F7473C26"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:huawei:honor_9_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "09F80677-BA85-4301-AAE6-661E66EFF359", "versionEndExcluding": "stanford-al10c00b175"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:huawei:honor_9:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "804A493E-A0C3-41F7-AB1C-AE58F7473C26"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:huawei:honor_9_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D1FD34EB-8972-4023-878E-08FCBADF97C2", "versionEndExcluding": "stanford-tl00c01b175"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:huawei:honor_9:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "804A493E-A0C3-41F7-AB1C-AE58F7473C26"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:huawei:honor_v9_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4FCC1F75-1B2B-4553-A73F-5631BC24F959", "versionEndExcluding": "duke-al20c00b191"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:huawei:honor_v9:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "EF2C1BBD-1BCA-4637-926E-6F81EB76C8E5"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:huawei:honor_v9_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A350B04E-5411-46E1-83EE-23427F7E2478", "versionEndExcluding": "duke-tl30c01b191"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:huawei:honor_v9:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "EF2C1BBD-1BCA-4637-926E-6F81EB76C8E5"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:huawei:nova_2_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B4F0500A-D9E3-46EB-AF66-87E62BC85021", "versionEndExcluding": "picasso-al00c00b162"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:huawei:nova_2:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "40EB1B51-6801-4C1C-ABBC-417295A4A280"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:huawei:nova_2_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E54D5FC2-A42B-4290-9CEA-99E1B22CB7D3", "versionEndExcluding": "picasso-tl00c01b162"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:huawei:nova_2:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "40EB1B51-6801-4C1C-ABBC-417295A4A280"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:huawei:nova_2_plus_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "996C1EC9-F251-444F-B447-7D8FB46C293C", "versionEndExcluding": "barca-al00c00b162"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:huawei:nova_2_plus:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "B612E3F4-CB5E-4FD4-9D0A-4393C99067D8"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:huawei:nova_2_plus_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "29C5BF15-67AE-4B91-A0AA-354FB85E0D3C", "versionEndExcluding": "barca-tl00c00b162"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:huawei:nova_2_plus:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "B612E3F4-CB5E-4FD4-9D0A-4393C99067D8"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:huawei:p9_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "AD504F2F-FCB5-4E3E-88FB-3D5F164EC26A", "versionEndExcluding": "eva-al10c00b396sp03"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:huawei:p9:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "B1E734BC-513F-4FF6-B4AB-46A3AD8FA9BA"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:huawei:p9_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FDF40632-4AB0-46FA-B36F-C7795A28F94B", "versionEndExcluding": "eva-cl00c92b396"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:huawei:p9:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "B1E734BC-513F-4FF6-B4AB-46A3AD8FA9BA"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:huawei:p9_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1C864183-BD7C-46B5-AD94-3281B8044D31", "versionEndExcluding": "eva-dl00c17b396"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:huawei:p9:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "B1E734BC-513F-4FF6-B4AB-46A3AD8FA9BA"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:huawei:p9_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "827596A6-E033-46C7-BEC9-A78CDA411875", "versionEndExcluding": "eva-tl00c01b396"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:huawei:p9:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "B1E734BC-513F-4FF6-B4AB-46A3AD8FA9BA"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:huawei:p10_plus_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0BE42535-6A21-4993-8F8B-2C54CE17F515", "versionEndExcluding": "vicky-al00ac00b172"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:huawei:p10_plus:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "FAD5BC83-41ED-4260-8883-4CA5898A4FAD"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:huawei:toronto_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DAF16468-2C98-4D95-8700-3CE1A533928B", "versionEndExcluding": "toronto-al00ac00b191"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:huawei:toronto:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "FD56AE7F-3CE7-4F9B-A187-77B074B1D4D3"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:huawei:toronto_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "66A9C781-A1AA-4F25-BC38-588BA8D3B4F0", "versionEndExcluding": "toronto-tl10c01b191"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:huawei:toronto:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "FD56AE7F-3CE7-4F9B-A187-77B074B1D4D3"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "psirt@huawei.com"}
