CVE-2019-5306

There is a Factory Reset Protection FRP bypass security vulnerability in P20 Huawei smart phones versions before Emily-AL00A 9.0.0.167C00E81R1P21T8. When re-configuring the mobile phone using the FRP function, an attacker can delete the activation lock after a series of operations. As a result, t...

CVE-2019-5306

There is a Factory Reset Protection FRP bypass security vulnerability in P20 Huawei smart phones versions before Emily-AL00A 9.0.0.167C00E81R1P21T8. When re-configuring the mobile phone using the FRP function, an attacker can delete the activation lock after a series of operations. As a result, t...

PT-2019-17569

Name of the Vulnerable Software and Affected Versions P20 Huawei smart phones versions before Emily-AL00A 9.0.0.167C00E81R1P21T8 Description The issue concerns a Factory Reset Protection FRP bypass security vulnerability. When re-configuring the mobile phone using the FRP function, an attacker ca...

PT-2019-17557

Name of the Vulnerable Software and Affected Versions Huawei P20 versions earlier than 9.0.0.167 Description A security issue exists in the Factory Reset Protection FRP function, allowing an attacker to bypass it by utilizing the Talkback mode. This can be achieved when re-configuring the mobile...

CVE-2019-5283: Undefined Security Weakness

There is Factory Reset Protection FRP bypass security vulnerability in P20 Huawei smart phones versions earlier than Emily-AL00A 9.0.0.167 C00E81R1P21T8. When re-configuring the mobile phone using the factory reset protection FRP function, an attacker can login the Talkback mode and can perform...

CVE-2019-5306: Undefined Security Weakness

There is a Factory Reset Protection FRP bypass security vulnerability in P20 Huawei smart phones versions before Emily-AL00A 9.0.0.167C00E81R1P21T8. When re-configuring the mobile phone using the FRP function, an attacker can delete the activation lock after a series of operations. As a result, t...

Information disclosure

Huawei VIP App is a mobile app for Malaysia customers that purchased P20 Series, Nova 3/3i and Mate 20. There is a vulnerability in versions before 4.0.5 that attackers can conduct bruteforce to the VIP App Web Services to get user information...

CVE-2018-7987

There is an out-of-bounds write vulnerability on Huawei P20 smartphones with versions before 8.1.0.171C00. The software does not handle the response message properly when the user doing certain inquiry operation, an attacker could send crafted message to the device, successful exploit could cause...

CVE-2018-7987

There is an out-of-bounds write vulnerability on Huawei P20 smartphones with versions before 8.1.0.171C00. The software does not handle the response message properly when the user doing certain inquiry operation, an attacker could send crafted message to the device, successful exploit could cause...

CVE-2018-7956

Huawei VIP App is a mobile app for Malaysia customers that purchased P20 Series, Nova 3/3i and Mate 20. There is a vulnerability in versions before 4.0.5 that attackers can conduct bruteforce to the VIP App Web Services to get user information...

CVE-2018-7956

CVE-2018-7956 concerns Huawei VIP App (Malaysia) with versions before 4.0.5. The vulnerability enables brute-force attempts against the VIP App Web Services to disclose user information, an information-disclosure issue with a CVSS v3 base score of 5.3 (MEDIUM). The root cause is improper protecti...

CVE-2018-7987

Affected product: Huawei P20 smartphones. Vulnerability: memory write out-of-bounds when handling a response message during certain inquiry operations, allowing a crafted message to cause a denial of service. Root cause: improper handling of the response message leading to out-of-bounds write (pr...

CVE-2018-7987

There is an out-of-bounds write vulnerability on Huawei P20 smartphones with versions before 8.1.0.171C00. The software does not handle the response message properly when the user doing certain inquiry operation, an attacker could send crafted message to the device, successful exploit could cause...

Huawei VIP Application Service Information Disclosure Vulnerability

Huawei VIP App is a mobile application service. The app mainly serves Malaysian users who have purchased P20 series, Nova3/3i and Mate 20. The Huawei VIP App service is vulnerable to information leakage. A brute force attacker could obtain some of the user's information...

PT-2018-18357

Name of the Vulnerable Software and Affected Versions: Huawei P20 versions prior to 8.1.0.171C00 Description: The issue arises from improper handling of response messages during certain inquiry operations, allowing an attacker to send crafted messages that could cause a denial of service conditio...

CVE-2018-7987: Out-of-bounds Write

There is an out-of-bounds write vulnerability on Huawei P20 smartphones with versions before 8.1.0.171C00. The software does not handle the response message properly when the user doing certain inquiry operation, an attacker could send crafted message to the device, successful exploit could cause...

Huawei P20 Memory Write Overrun Vulnerability

Huawei P20 is a smartphone from Huawei. Huawei P20 suffers from a memory write out-of-bounds vulnerability. When the user performs certain query operations, the system does not properly process the returned response message, an attacker can send a well-constructed response message to the phone,...

XFINITY Gateway Technicolor Cross-Site Request Forgery Vulnerability

XFINITY Technicolor TC dpc3941T is a gateway product for multimedia from XFINITY USA. A cross-site request forgery vulnerability exists in Technicolor TC dpc3941T devices using the dpc3941-P20-18-v303r20421733-160413a-CMCST firmware. An attacker could use this vulnerability to change the Wi-Fi...

CVE-2014-2504

EMC Documentum D2 3.1 before P20, 3.1 SP1 before P02, 4.0 before P10, 4.1 before P13, and 4.2 before P01 allows remote authenticated users to bypass intended access restrictions and execute arbitrary Documentum Query Language DQL queries by calling 1 a core method or 2 a D2FS web-service method...