Published: 10/07/2019 Updated: 24/08/2020

CVSS v2 Base Score: 2.1 | Impact Score: 2.9 | Exploitability Score: 3.9

CVSS v3 Base Score: 4.6 | Impact Score: 3.6 | Exploitability Score: 0.9

VMScore: 187

Vector: AV:L/AC:L/Au:N/C:N/I:P/A:N

There is a Factory Reset Protection (FRP) bypass vulnerability on several smartphones. The system does not sufficiently verify the permission, an attacker could do a certain operation on certain step of setup wizard. Successful exploit could allow the attacker bypass the FRP protection. Affected products: Mate 20 X, versions earlier than Ever-AL00B 9.0.0.200(C00E200R2P1); Mate 20, versions earlier than Hima-AL00B/Hima-TL00B 9.0.0.200(C00E200R2P1); Honor Magic 2, versions earlier than Tony-AL00B/Tony-TL00B 9.0.0.182(C00E180R2P2).

Vulnerable Product	Search on Vulmon	Subscribe to Product
huawei mate_20_x_firmware
huawei mate_20_firmware
huawei honor_magic_2_firmware

There is a Factory Reset Protection (FRP) bypass vulnerability on several smartphones The system does not sufficiently verify the permission, an attacker could do a certain operation on certain step of setup wizard Successful exploit could allow the attacker bypass the FRP protection (Vulnerability ID: HWPSIRT-2018-11020) This vulnerability has ...

CWE-863 https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190626-01-frp-en https://nvd.nist.gov https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190626-01-frp-en

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2019-5220

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect