CVE-2017-17279

CVE-2017-17279 is an authentication bypass vulnerability in the soundtrigger module of Huawei Mate 9 Pro smartphones running software versions prior to LON-AL00B 8.0.0.343(C00). An attacker can trick a user into installing a malicious application, which then exploits this design flaw. This allows the attacker to bypass authentication and remotely control the phone to send short messages and make calls within audio range. Rated as Medium severity (CVSS 5.5), the vulnerability requires user interaction (UI:R) to install a malicious application, but once installed, it grants high integrity impact (I:H) to the attacker. The attack vector is local (AV:L) and has low attack complexity (AC:L). There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage regarding this vulnerability. Its EPSS score is very low, indicating a minimal likelihood of exploitation.