Lucene search

Huawei TechnologiesHUAWEI-SA-20200115-01-FRP

HistoryJan 15, 2020 - 12:00 a.m.

Security Advisory - FRP Bypass Vulnerability in Huawei Smart Phones

2020-01-1500:00:00

Huawei Technologies

www.huawei.com

2.1 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:L/Au:N/C:N/I:P/A:N

4.6 Medium

CVSS3

Attack Vector

PHYSICAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

0.001 Low

EPSS

Percentile

25.1%

JSON

There is a Factory Reset Protection (FRP) bypass security vulnerability in some Huawei smart phones. When re-configuring the mobile phone using the factory reset protection (FRP) function, an attacker login the Talkback mode and can perform some operations to install a third-Party application. As a result, the FRP function is bypassed. (Vulnerability ID: HWPSIRT-2018-09212)

This vulnerability has been assigned a Common Vulnerabilities and Exposures (CVE) ID: CVE-2019-19412

Huawei has released software updates to fix this vulnerability. This advisory is available at the following link:
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200115-01-frp-en

Affected configurations

Vulners

Node

huaweialp-al00bRange<9.0.0.181

huaweialp-l09Range<9.0.0.201

huaweialp-l29Range<9.0.0.177

huaweialp-l29Range<9.0.0.195

huaweiwarsaw-al00Range<8.0.0.168

huaweibla-al00bRange<9.0.0.181

huaweibla-l09cRange<9.0.0.177

huaweibla-l09cRange<9.0.0.206

huaweibla-l29cRange<9.0.0.179

huaweibla-l29cRange<9.0.0.194

huaweibla-l29cRange<9.0.0.206

huaweibla-l29cRange<9.0.0.210

huaweiberkeley-al20Range<9.0.0.156

huaweiberkeley-l09Range<8.0.0.172

huaweiberkeley-l09Range<8.0.0.173

huaweiemily-l29cRange<9.0.0.159

huaweiemily-l29cRange<9.0.0.160

huaweiemily-l29cRange<9.0.0.165

huaweiemily-l29cRange<9.0.0.168

huaweiemily-l29cRange<9.0.0.196

huaweifigo-l03Range<9.1.0.130

huaweifigo-l21Range<9.1.0.130

huaweifigo-l23Range<9.1.0.130

huaweifigo-l31Range<9.1.0.130

huaweiflorida-l03Range<9.1.0.121

huaweiflorida-l21Range<8.0.0.129

huaweiflorida-l21Range<8.0.0.131

huaweiflorida-l21Range<8.0.0.132

huaweiflorida-l22Range<8.0.0.132

huaweiflorida-l23Range<8.0.0.144

huaweipc_smart_full_sceneRange<9.1.0.130

huaweipc_smart_full_sceneRange<9.1.0.124

huaweihuawei_p20Range<8.0.0.148

huaweihuawei_p20Range<8.0.0.155

huaweihuawei_p20Range<8.0.0.156

huaweihuawei_p20Range<8.0.0.157

huaweihuawei_nova_3eRange<8.0.0.147

huaweihuawei_nova_3eRange<8.0.0.148

huaweihuawei_nova_3eRange<8.0.0.160

huaweihuawei_nova_3eRange<8.0.0.168

huaweihuawei_nova_3eRange<8.0.0.172

huaweihonor_view_10Range<9.0.0.202

huaweivicky-al00aRange<8.0.0.182

huaweileland-l21aRange<8.0.0.135

huaweileland-l21aRange<9.1.0.118

huaweileland-l22aRange<9.1.0.118

huaweileland-l22cRange<9.1.0.118

huaweileland-l31aRange<8.0.0.139

CPENameOperatorVersion
alp-al00blt9.0.0.181
alp-l09lt9.0.0.201
alp-l29lt9.0.0.177
alp-l29lt9.0.0.195
anne-al00lt8.0.0.168
bla-al00blt9.0.0.181
bla-l09clt9.0.0.177
bla-l09clt9.0.0.206
bla-l29clt9.0.0.179
bla-l29clt9.0.0.194

Name	Operator	Version
alp-al00b	lt	9.0.0.181
alp-l09	lt	9.0.0.201
alp-l29	lt	9.0.0.177
alp-l29	lt	9.0.0.195
anne-al00	lt	8.0.0.168
bla-al00b	lt	9.0.0.181
bla-l09c	lt	9.0.0.177
bla-l09c	lt	9.0.0.206
bla-l29c	lt	9.0.0.179
bla-l29c	lt	9.0.0.194

Rows per page:

1-10 of 541

2.1 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:L/Au:N/C:N/I:P/A:N

4.6 Medium

CVSS3

Attack Vector

PHYSICAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

0.001 Low

EPSS

Percentile

25.1%

JSON

Related for HUAWEI-SA-20200115-01-FRP