Security Advisory - FRP Bypass Vulnerability in MyCloud APP of Huawei Smart Phones

There is a security vulnerability which could lead to Factory Reset Protection FRP bypass in the MyCloud APP installed on some Huawei smart phones. When re-configuring the mobile phone using the FRP function, an attacker can replace the old account with a new one through special steps by exploit...

CVE-2018-7991

Huawei smartphones Mate10 with versions earlier before ALP-AL00B 8.0.0.110C00 have a Factory Reset Protection FRP bypass vulnerability. The system does not sufficiently verify the permission, an attacker uses a data cable to connect the smartphone to the computer and then perform some specific...

CVE-2018-7991

CVE-2018-7991 concerns Huawei Mate10 smartphones (versions earlier than ALP-AL00B 8.0.0.110(C00)) with a Factory Reset Protection (FRP) bypass vulnerability. The issue arises because the system does not sufficiently verify permissions when a device is connected via a data cable to a computer and ...

CVE-2018-7939

Huawei smart phones G9 Lite, Honor 5A, Honor 6X, Honor 8 with the versions before VNS-L53C605B120CUSTC605D103, the versions before CAM-L03C605B143CUSTC605D008, the versions before CAM-L21C10B145, the versions before CAM-L21C185B156, the versions before CAM-L21C223B133, the versions before...

CVE-2018-7939

Huawei smart phones G9 Lite, Honor 5A, Honor 6X, Honor 8 with the versions before VNS-L53C605B120CUSTC605D103, the versions before CAM-L03C605B143CUSTC605D008, the versions before CAM-L21C10B145, the versions before CAM-L21C185B156, the versions before CAM-L21C223B133, the versions before...

CVE-2018-7939

CVE-2018-7939 specifies a Factory Reset Protection (FRP) bypass vulnerability in multiple Huawei/Honor smartphones (e.g., G9 Lite, Honor 5A/6X/8 and various build versions) where enabling TalkBack during FRP reconfiguration disables the boot wizard and bypasses FRP. Affected builds are listed in ...

Security Advisory - FRP Bypass Vulnerability on Smartphones

There is a Factory Reset Protection FRP bypass vulnerability on some Huawei smartphones. The system does not sufficiently verify the permission, an attacker uses a data cable to connect the smartphone to the computer and then perform some specific operations. Successful exploit could allow the...

Security Advisory - FRP Bypass Vulnerability in Huawei Smart Phones

There is Factory Reset Protection FRP bypass security vulnerability in some Huawei smart phones. When re-configuring the mobile phone using the factory reset protection FRP function, an attacker can disable the boot wizard by enable the talkback function. As a result, the FRP function is bypassed...

CVE-2018-7990

Mate10 Pro Huawei smart phones with the versions before 8.1.0.326C00 have a FRP bypass vulnerability. During the mobile phone reseting process, an attacker could bypass "Find My Phone" protect after a series of voice and keyboard operations. Successful exploit could allow an attacker to bypass FR...

Security feature bypass

Mate 10 Pro Huawei smart phones with the versions before BLA-L29 8.0.0.148C432 have a Factory Reset Protection FRP bypass security vulnerability. When re-configuring the mobile phone using the factory reset protection FRP function, an attacker can connect the phone with PC and send special...

CVE-2018-7936

Mate 10 Pro Huawei smart phones with the versions before BLA-L29 8.0.0.148C432 have a Factory Reset Protection FRP bypass security vulnerability. When re-configuring the mobile phone using the factory reset protection FRP function, an attacker can connect the phone with PC and send special...

Authorization

Mate10 Pro Huawei smart phones with the versions before 8.1.0.326C00 have a FRP bypass vulnerability. During the mobile phone reseting process, an attacker could bypass "Find My Phone" protect after a series of voice and keyboard operations. Successful exploit could allow an attacker to bypass FR...

CVE-2018-7936

CVE-2018-7936 affects Huawei Mate 10 Pro devices with firmware prior to BLA-L29 8.0.0.148 (C432). The FRP bypass occurs when reconfiguring FRP; an attacker can connect the phone to a PC and issue instructions to install a third‑party desktop and disable the boot wizard, effectively bypassing FRP ...

CVE-2018-7990

Mate10 Pro Huawei smart phones with the versions before 8.1.0.326C00 have a FRP bypass vulnerability. During the mobile phone reseting process, an attacker could bypass "Find My Phone" protect after a series of voice and keyboard operations. Successful exploit could allow an attacker to bypass FR...

CVE-2018-7936

Mate 10 Pro Huawei smart phones with the versions before BLA-L29 8.0.0.148C432 have a Factory Reset Protection FRP bypass security vulnerability. When re-configuring the mobile phone using the factory reset protection FRP function, an attacker can connect the phone with PC and send special...

CVE-2018-7990

CVE-2018-7990 affects Huawei Mate 10 Pro smartphones running versions before 8.1.0.326(C00). The vulnerability enables an FRP bypass during the phone reset process, where an attacker could bypass the Find My Phone protection after a sequence of voice and keyboard actions. This is tied to Huawei’s...

Security Advisory - FRP Bypass Vulnerability on Huawei Smart Phones

There is a FRP bypass vulnerability on Huawei smart phones. During the mobile phone reseting process, an attacker could bypass "Find My Phone" protect after a series of voice and keyboard operations. Successful exploit could allow an attacker to bypass FRP. Vulnerability ID: HWPSIRT-2018-06018 Th...

Security Advisory - FRP Bypass Vulnerability in Huawei Smart Phones

There is Factory Reset Protection FRP bypass security vulnerability in some Huawei smart phones. When re-configuring the mobile phone using the factory reset protection FRP function, an attacker can connect the phone with PC and send special instructions to install third party desktop and disable...

Security Advisory - FRP Bypass Vulnerability in Huawei Smart Phones

There is Factory Reset Protection FRP bypass security vulnerability in some Huawei smart phones. When re-configuring the mobile phone using the factory reset protection FRP function, an attacker can login the configuration flow by Gaode Map and can perform some operations to update the Google...

CVE-2018-7944

Huawei smart phones Emily-AL00A with software 8.1.0.106SP2C00 and 8.1.0.107SP5C00 have a Factory Reset Protection FRP bypass vulnerability. An attacker gets some user's smart phone and performs some special operations in the guide function. The attacker may exploit the vulnerability to bypass FRP...