medium4.6
CVE-2019-19412
Huawei smart phones have a Factory Reset Protection (FRP) bypass security vulnerability.
Impact
Huawei smart phones have a Factory Reset Protection (FRP) bypass security vulnerability. When re-configuring the mobile phone using the factory reset protection (FRP) function, an attacker login the Talkback mode and can perform some operations to install a third-Party application. Affected products can be found in https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200115-01-frp-en.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Huawei | Alp-Al00b Firmware | before 9.0.0.181\(c00e87r2p20t8\) |
| Huawei | Alp-L09 Firmware | before 9.0.0.201\(c432e4r1p9\) |
| Huawei | Alp-L29 Firmware | before 9.0.0.177\(c185e2r1p12t8\) before 9.0.0.195\(c636e2r1p12\) |
| Huawei | Anne-Al00 Firmware | before 8.0.0.168\(c00\) |
| Huawei | Bla-Al00b Firmware | before 9.0.0.181\(c00e88r2p15t8\) |
| Huawei | Bla-L09c Firmware | before 9.0.0.177\(c185e2r1p13t8\) before 9.0.0.206\(c432e4r1p11\) |
| Huawei | Bla-L29c Firmware | before 9.0.0.179\(c576e2r1p7t8\) before 9.0.0.194\(c185e2r1p13\) before 9.0.0.206\(c432e4r1p11\) before 9.0.0.210\(c635e4r1p13\) |
| Huawei | Berkeley-Al20 Firmware | before 9.0.0.156\(c00e156r2p14t8\) |
| Huawei | Berkeley-L09 Firmware | before 8.0.0.172\(c432\) before 8.0.0.173\(c636\) |
| Huawei | Emily-L29c Firmware | before 9.0.0.159\(c185e2r1p12t8\) before 9.0.0.159\(c461e2r1p11t8\) before 9.0.0.160\(c432e7r1p11t8\) before 9.0.0.165\(c605e2r1p12\) before 9.0.0.168\(c636e7r1p13t8\) before 9.0.0.168\(c782e3r1p11t8\) |
| Huawei | Figo-L03 Firmware | before 9.1.0.130\(c605e6r1p5t8\) |
| Huawei | Figo-L21 Firmware | before 9.1.0.130\(c185e6r1p5t8\) before 9.1.0.130\(c635e6r1p5t8\) |