Authorization

2017-11-2219:29:00

PRIOn knowledge base

www.prio-n.com

4.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

25.9%

JSON

Huawei Honor 5S smart phones with software the versions before TAG-TL00C01B173 have a Factory Reset Protection (FRP) bypass security vulnerability due to the improper design. An attacker can access factory reset page without authorization by only dial with special code. The attacker can exploit this vulnerability to restore the phone to factory settings.

CPENameOperatorVersion
honor_5s_firmwareeq< tag-tl0c1b173

CPE	Name	Operator	Version
	honor_5s_firmware	eq	< tag-tl0c1b173

References

www.huawei.com/en/psirt/security-advisories/huawei-sa-20170901-02-smartphone-en