CVE-2017-2721

CVE-2017-2721 describes a factory reset protection (FRP) bypass vulnerability affecting Huawei smartphones (devices listed in the NVD/CVE entry). The root cause is an FRP bypass during FRP configuration via the Swype Keyboard, allowing an attacker to bypass FRP and perform operations to update th...

CVE-2017-8152

Huawei Honor 5S smart phones with software the versions before TAG-TL00C01B173 have a Factory Reset Protection FRP bypass security vulnerability due to the improper design. An attacker can access factory reset page without authorization by only dial with special code. The attacker can exploit thi...

CVE-2017-2710

BTV-W09C229B002CUSTC229D005,BTV-W09C233B029, earlier than BTV-W09C100B006CUSTC100D002 versions, earlier than BTV-W09C128B003CUSTC128D002 versions, earlier than BTV-W09C199B002CUSTC199D002 versions, earlier than BTV-W09C209B005CUSTC209D001 versions, earlier than BTV-W09C331B002CUSTC331D001 version...

CVE-2017-8152

CVE-2017-8152 affects Huawei Honor 5S devices running software before TAG-TL00C01B173. The FRP (Factory Reset Protection) bypass is due to an improper design that lets an attacker access the factory reset page without authorization by dialing a special code. According to the NVD metrics, the atta...

CVE-2017-2710

CVE-2017-2710 describes a Factory Reset Protection (FRP) bypass affecting Huawei devices (e.g., Huawei Beethoven-W09A/CRR-L09 and related model variants listed in CVE records). The vulnerability allows an attacker to bypass FRP during the reconfiguration process by manipulating FRP to update the ...

CVE-2017-8161

EVA-L09 smartphones with software Earlier than EVA-L09C25B150CUSTC25D003 versions,Earlier than EVA-L09C440B140 versions,Earlier than EVA-L09C464B361 versions,Earlier than EVA-L09C675B320CUSTC675D004 versions have Factory Reset Protection FRP bypass security vulnerability. When re-configuring the...

CVE-2017-8161

CVE-2017-8161 affects Huawei EVA-L09 smartphones. The FRP bypass vulnerability occurs on devices running software older than the listed builds (EVA-L09C25B150CUSTC25D003, EVA-L09C440B140, EVA-L09C464B361, EVA-L09C675B320CUSTC675D004). During FRP re-configuration, an attacker can use the Swype inp...

CVE-2017-8173

CVE-2017-8173 corresponds to a FRP (Factory Reset Protection) bypass vulnerability affecting Huawei smartphones (models Maya-L02, VKY-L09, Vicky-AL00A, Victoria-AL00A, Warsaw-AL00) with firmware versions older than the specified builds (Maya-L02C636B126, VKY-L29C10B151, VTR-L29C10B151, Vicky-AL00...

CVE-2017-8171

Huawei CVE-2017-8171 affects certain Huawei smartphones with firmware earlier than Vicky-AL00AC00B172D. A FRP bypass vulnerability exists where, during FRP reconfiguration, an attacker can enter TalkBack mode to bypass Google account verification. Impact is bypass of FRP protection (no data exfil...

CVE-2017-8173

Maya-L02,VKY-L09,VTR-L29,Vicky-AL00A,Victoria-AL00A,Warsaw-AL00 smart phones with software of earlier than Maya-L02C636B126 versions,earlier than VKY-L29C10B151 versions,earlier than VTR-L29C10B151 versions,earlier than Vicky-AL00AC00B162 versions,earlier than Victoria-AL00AC00B167 versions,earli...

PT-2017-18161

Name of the Vulnerable Software and Affected Versions Huawei Honor 5S versions prior to TAG-TL00C01B173 Description The issue is related to a Factory Reset Protection FRP bypass security vulnerability due to improper design. An attacker can access the factory reset page without authorization by...

PT-2017-18177

Name of the Vulnerable Software and Affected Versions Huawei smart phones versions earlier than Vicky-AL00AC00B172D Description The issue allows an attacker to bypass the Factory Reset Protection FRP security feature by utilizing the Talkback mode during the factory reset process, enabling them t...

CVE-2017-2710: Undefined Security Weakness

BTV-W09C229B002CUSTC229D005,BTV-W09C233B029, earlier than BTV-W09C100B006CUSTC100D002 versions, earlier than BTV-W09C128B003CUSTC128D002 versions, earlier than BTV-W09C199B002CUSTC199D002 versions, earlier than BTV-W09C209B005CUSTC209D001 versions, earlier than BTV-W09C331B002CUSTC331D001 version...

PT-2017-18169

Name of the Vulnerable Software and Affected Versions EVA-L09 smartphones with software Earlier than EVA-L09C25B150CUSTC25D003 versions EVA-L09 smartphones with software Earlier than EVA-L09C440B140 versions EVA-L09 smartphones with software Earlier than EVA-L09C464B361 versions EVA-L09 smartphon...

CVE-2017-8152: Improperly Implemented Security Check for Standard

Huawei Honor 5S smart phones with software the versions before TAG-TL00C01B173 have a Factory Reset Protection FRP bypass security vulnerability due to the improper design. An attacker can access factory reset page without authorization by only dial with special code. The attacker can exploit thi...

PT-2017-15495

Name of the Vulnerable Software and Affected Versions Nice smartphones versions prior to Nice-AL00C00B0135 Description The issue concerns an authentication bypass in the 'Find Phone' function. This allows an unauthenticated attacker to potentially wipe and factory reset the phone by following...

CVE-2017-2708: Missing Authentication for Critical Function

The 'Find Phone' function in Nice smartphones with software versions earlier before Nice-AL00C00B0135 has an authentication bypass vulnerability. An unauthenticated attacker may wipe and factory reset the phone by special steps. Due to missing authentication of the 'Find Phone' function, an...

PT-2017-15508

Name of the Vulnerable Software and Affected Versions Huawei smart phones with software versions Berlin-L21C10B130 through Berlin-L21C185B133 Huawei smart phones with software versions Berlin-L21HNC10B131 through Berlin-L21HNC185B140 Huawei smart phones with software versions Berlin-L21HNC432B151...

PT-2017-15497

Name of the Vulnerable Software and Affected Versions BTV-W09C229B002CUSTC229D005 BTV-W09C233B029 BTV-W09C100B006CUSTC100D002 versions earlier than BTV-W09C100B006CUSTC100D002 BTV-W09C128B003CUSTC128D002 versions earlier than BTV-W09C128B003CUSTC128D002 BTV-W09C199B002CUSTC199D002 versions earlie...

PT-2017-18179

Name of the Vulnerable Software and Affected Versions Maya-L02 versions earlier than C636B126 VKY-L09 versions earlier than C10B151 VTR-L29 versions earlier than C10B151 Vicky-AL00A versions earlier than C00B162 Victoria-AL00A versions earlier than C00B167 Warsaw-AL00 versions earlier than C00B20...