CVE-2017-2713

5.4 mediumEPSS 0.3%

Medium (5.4) in huawei p9 firmware. EPSS 0.3% chance of exploitation in the next 30 days.

HUAWEI P9 smartphones with software versions earlier before EVA-L09C432B383, versions earlier before EVA-L09C636B380, versions earlier before VIE-L09C432B370, versions earlier before VIE-L29C636B370 have an insufficient input validation vulnerability. An attacker could exploit this vulnerability to tamper with air interface signaling messages and obtain some communication information.

Severity

CVSS 3.0

5.4 medium

CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 27% of CVEs (scores of 2026-10-31)
CWE: CWE-20
Published: 2017-11-22
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

huawei:p9_firmware

References

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170419-01-smartphone-en
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170419-01-smartphone-en

Check your stack JSON