CVE-2017-8171

MEDIUM

Huawei P10 Plus Firmware - Exposure to Wrong Actor

Title source: rule

Description

Huawei smart phones with software earlier than Vicky-AL00AC00B172D versions have a Factory Reset Protection (FRP) bypass security vulnerability. When re-configuring the mobile phone using the factory reset protection (FRP) function, an attacker can login the Talkback mode and can perform some operations to bypass the Google account verification. As a result, the FRP function is bypassed.

Scores

CVSS v3 4.6
EPSS 0.0003
EPSS Percentile 7.4%
Attack Vector PHYSICAL
CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Classification

CWE
CWE-668
Status draft

Affected Products (1)

huawei/p10_plus_firmware < vicky-al00ac00b172d

Timeline

Published Nov 22, 2017
Tracked Since Feb 18, 2026