Activation Lock Bypass Vulnerability in Huawei Mate 9 Pro Smartphones

CVE-2017-17326

Summary

The Huawei Mate 9 Pro smartphones have a vulnerability that allows attackers to bypass the activation lock feature. This issue arises due to insufficient protection mechanisms within the software. When the 'Find My Phone' feature is enabled, the device should require activation by the previous account following a factory reset. However, an attacker can exploit this flaw to gain unauthorized access and activate the smartphone using their own account after executing a specific sequence of operations. Users are advised to apply available security patches to mitigate this risk.

References