CVE-2019-19412

2020-06-0818:21:28
huawei
www.cve.org
4.7 Medium
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
25.2%
JSON
Huawei smart phones have a Factory Reset Protection (FRP) bypass security vulnerability. When re-configuring the mobile phone using the factory reset protection (FRP) function, an attacker login the Talkback mode and can perform some operations to install a third-Party application. Affected products can be found in https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200115-01-frp-en.
CNA Affected

[
  {
    "product": "ALP-AL00B",
    "vendor": "Huawei",
    "versions": [
      {
        "status": "affected",
        "version": "earlier than 9.0.0.181(C00E87R2P20T8)"
      }
    ]
  },
  {
    "product": "ALP-L09",
    "vendor": "Huawei",
    "versions": [
      {
        "status": "affected",
        "version": "earlier than 9.0.0.201(C432E4R1P9)"
      }
    ]
  },
  {
    "product": "ALP-L29",
    "vendor": "Huawei",
    "versions": [
      {
        "status": "affected",
        "version": "earlier than 9.0.0.177(C185E2R1P12T8)"
      },
      {
        "status": "affected",
        "version": "earlier than 9.0.0.195(C636E2R1P12)"
      }
    ]
  },
  {
    "product": "Anne-AL00",
    "vendor": "Huawei",
    "versions": [
      {
        "status": "affected",
        "version": "earlier than 8.0.0.168(C00)"
      }
    ]
  },
  {
    "product": "BLA-AL00B",
    "vendor": "Huawei",
    "versions": [
      {
        "status": "affected",
        "version": "earlier than 9.0.0.181(C00E88R2P15T8)"
      }
    ]
  },
  {
    "product": "BLA-L09C",
    "vendor": "Huawei",
    "versions": [
      {
        "status": "affected",
        "version": "earlier than 9.0.0.177(C185E2R1P13T8)"
      },
      {
        "status": "affected",
        "version": "earlier than 9.0.0.206(C432E4R1P11)"
      }
    ]
  },
  {
    "product": "BLA-L29C",
    "vendor": "Huawei",
    "versions": [
      {
        "status": "affected",
        "version": "earlier than 9.0.0.179(C576E2R1P7T8)"
      },
      {
        "status": "affected",
        "version": "earlier than 9.0.0.194(C185E2R1P13)"
      },
      {
        "status": "affected",
        "version": "earlier than 9.0.0.206(C432E4R1P11)"
      },
      {
        "status": "affected",
        "version": "earlier than 9.0.0.210(C635E4R1P13)"
      }
    ]
  },
  {
    "product": "Berkeley-AL20",
    "vendor": "Huawei",
    "versions": [
      {
        "status": "affected",
        "version": "earlier than 9.0.0.156(C00E156R2P14T8)"
      }
    ]
  },
  {
    "product": "Berkeley-L09",
    "vendor": "Huawei",
    "versions": [
      {
        "status": "affected",
        "version": "earlier than 8.0.0.172(C432)"
      },
      {
        "status": "affected",
        "version": "earlier than 8.0.0.173(C636)"
      }
    ]
  },
  {
    "product": "Emily-L29C",
    "vendor": "Huawei",
    "versions": [
      {
        "status": "affected",
        "version": "earlier than 9.0.0.159(C185E2R1P12T8)"
      },
      {
        "status": "affected",
        "version": "earlier than 9.0.0.159(C461E2R1P11T8)"
      },
      {
        "status": "affected",
        "version": "earlier than 9.0.0.160(C432E7R1P11T8)"
      },
      {
        "status": "affected",
        "version": "earlier than 9.0.0.165(C605E2R1P12)"
      },
      {
        "status": "affected",
        "version": "earlier than 9.0.0.168(C636E7R1P13T8)"
      },
      {
        "status": "affected",
        "version": "earlier than 9.0.0.168(C782E3R1P11T8)"
      },
      {
        "status": "affected",
        "version": "earlier than 9.0.0.196(C635E2R1P11T8)"
      }
    ]
  },
  {
    "product": "Figo-L03",
    "vendor": "Huawei",
    "versions": [
      {
        "status": "affected",
        "version": "earlier than 9.1.0.130(C605E6R1P5T8)"
      }
    ]
  },
  {
    "product": "Figo-L21",
    "vendor": "Huawei",
    "versions": [
      {
        "status": "affected",
        "version": "earlier than 9.1.0.130(C185E6R1P5T8)"
      },
      {
        "status": "affected",
        "version": "earlier than 9.1.0.130(C635E6R1P5T8)"
      }
    ]
  },
  {
    "product": "Figo-L23",
    "vendor": "Huawei",
    "versions": [
      {
        "status": "affected",
        "version": "earlier than 9.1.0.130(C605E6R1P5T8)"
      }
    ]
  },
  {
    "product": "Figo-L31",
    "vendor": "Huawei",
    "versions": [
      {
        "status": "affected",
        "version": "earlier than 9.1.0.130(C432E8R1P5T8)"
      }
    ]
  },
  {
    "product": "Florida-L03",
    "vendor": "Huawei",
    "versions": [
      {
        "status": "affected",
        "version": "earlier than 9.1.0.121(C605E5R1P1T8)"
      }
    ]
  },
  {
    "product": "Florida-L21",
    "vendor": "Huawei",
    "versions": [
      {
        "status": "affected",
        "version": "earlier than 8.0.0.129(C605)"
      },
      {
        "status": "affected",
        "version": "earlier than 8.0.0.131(C432)"
      },
      {
        "status": "affected",
        "version": "earlier than 8.0.0.132(C185)"
      }
    ]
  },
  {
    "product": "Florida-L22",
    "vendor": "Huawei",
    "versions": [
      {
        "status": "affected",
        "version": "earlier than 8.0.0.132(C636)"
      }
    ]
  },
  {
    "product": "Florida-L23",
    "vendor": "Huawei",
    "versions": [
      {
        "status": "affected",
        "version": "earlier than 8.0.0.144(C605)"
      }
    ]
  },
  {
    "product": "HUAWEI P smart",
    "vendor": "Huawei",
    "versions": [
      {
        "status": "affected",
        "version": "earlier than 9.1.0.130(C185E6R1P5T8)"
      },
      {
        "status": "affected",
        "version": "earlier than 9.1.0.130(C605E6R1P5T8)"
      }
    ]
  },
  {
    "product": "HUAWEI P smart,HUAWEI Y7s",
    "vendor": "Huawei",
    "versions": [
      {
        "status": "affected",
        "version": "earlier than 9.1.0.124(C636E6R1P5T8)"
      }
    ]
  },
  {
    "product": "HUAWEI P20 lite",
    "vendor": "Huawei",
    "versions": [
      {
        "status": "affected",
        "version": "earlier than 8.0.0.148(C635)"
      },
      {
        "status": "affected",
        "version": "earlier than 8.0.0.155(C185)"
      },
      {
        "status": "affected",
        "version": "earlier than 8.0.0.155(C605)"
      },
      {
        "status": "affected",
        "version": "earlier than 8.0.0.156(C605)"
      },
      {
        "status": "affected",
        "version": "earlier than 8.0.0.157(C432)"
      }
    ]
  },
  {
    "product": "HUAWEI nova 3e,HUAWEI P20 lite",
    "vendor": "Huawei",
    "versions": [
      {
        "status": "affected",
        "version": "earlier than 8.0.0.147(C461)"
      },
      {
        "status": "affected",
        "version": "earlier than 8.0.0.148(ZAFC185)"
      },
      {
        "status": "affected",
        "version": "earlier than 8.0.0.160(C185)"
      },
      {
        "status": "affected",
        "version": "earlier than 8.0.0.160(C605)"
      },
      {
        "status": "affected",
        "version": "earlier than 8.0.0.168(C432)"
      },
      {
        "status": "affected",
        "version": "earlier than 8.0.0.172(C636)"
      }
    ]
  },
  {
    "product": "Honor View 10",
    "vendor": "Huawei",
    "versions": [
      {
        "status": "affected",
        "version": "earlier than 9.0.0.202(C567E6R1P12T8)"
      }
    ]
  },
  {
    "product": "Leland-AL00A",
    "vendor": "Huawei",
    "versions": [
      {
        "status": "affected",
        "version": "earlier than 8.0.0.182(C00)"
      }
    ]
  },
  {
    "product": "Leland-L21A",
    "vendor": "Huawei",
    "versions": [
      {
        "status": "affected",
        "version": "earlier than 8.0.0.135(C185)"
      },
      {
        "status": "affected",
        "version": "earlier than 9.1.0.118(C636E4R1P1T8)"
      }
    ]
  },
  {
    "product": "Leland-L22A",
    "vendor": "Huawei",
    "versions": [
      {
        "status": "affected",
        "version": "earlier than 9.1.0.118(C636E4R1P1T8)"
      }
    ]
  },
  {
    "product": "Leland-L22C",
    "vendor": "Huawei",
    "versions": [
      {
        "status": "affected",
        "version": "earlier than 9.1.0.118(C636E4R1P1T8)"
      }
    ]
  },
  {
    "product": "Leland-L31A",
    "vendor": "Huawei",
    "versions": [
      {
        "status": "affected",
        "version": "earlier than 8.0.0.139(C432)"
      }
    ]
  }
]