CVE-2017-2727

CVE-2017-2727 describes a privilege escalation vulnerability in Huawei P9 smartphones running specific older software versions. An unauthenticated attacker can bypass the phone activation process to access the user management page and create a new user. This allows the attacker to operate a limited set of phone functions. The vulnerability has a CVSS score of 4.3 (Medium) due to its physical attack vector and low impact on confidentiality, integrity, and availability. There is no known active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.