← Vulnerability feed

Vulnerability record · CVE-2017-17145 · published 9 March 2018

CVE-2017-17145: Huawei honor v9 play firmware vulnerability

Huawei · Honor V9 Play Firmware

Huawei Honor V9 Play smart phones with the versions before Jimmy-AL00AC00B135 have an authentication bypass vulnerability due to the improper design of a component. An attacker who get a user's smart phone can execute specific operation, and delete the fingerprint of the phone without authentication.

4.6 CVSS 3.0 Medium EPSS 0.24% · top 85.6%
4.6CVSS 3.0 base score, v2 2.1
0.24%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
2References
17 Jun 2026Last modified by NVD

Description

Huawei Honor V9 Play smart phones with the versions before Jimmy-AL00AC00B135 have an authentication bypass vulnerability due to the improper design of a component. An attacker who get a user's smart phone can execute specific operation, and delete the fingerprint of the phone without authentication.

CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://www.huawei.com/en/psirt/security-advisories/2017/huawei-sa-20171213-03-smartphone-en Vendor Advisory
http://www.huawei.com/en/psirt/security-advisories/2017/huawei-sa-20171213-03-smartphone-en Vendor Advisory

Track CVE-2017-17145 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.8CVE-2017-14491dnsmasq heap buffer overflow via crafted DNS responsednsmasq before 2.78 contains a heap-based buffer overflow (CWE-787 out-of-bounds write) triggered by a crafted DNS response. Because dnsmasq is widel…EPSS 85%analysed6.8CVE-2017-15351Huawei honor v9 play firmware improper authentication vulnerabilityThe 'Find Phone' function in Huawei Honor V9 play smart phones with versions earlier than Jimmy-AL00AC00B135 has an authentication bypass vulnerabili…EPSS 0.33%

Source: NIST National Vulnerability Database (record CVE-2017-17145), CISA KEV, FIRST EPSS (scores of 2026-10-11). This page is refreshed as NVD updates the record.