CVE-2017-2721
Some Huawei smart phones with software Berlin-L21C10B130,Berlin-L21C185B133,Berlin-L21HNC10B131,Berlin-L21HNC185B140,Berlin-L21HNC432B151,Berlin-L22C636B160,Berlin-L22HNC636B130,Berlin-L22HNC675B150CUSTC675D001,Berlin-L23C605B131,Berlin-L24HNC567B110,FRD-L02C432B120,FRD-L02C635B130,FRD-L02C675B170CUSTC675D001,FRD-L04C567B162,FRD-L04C605B131,FRD-L09C10B130,FRD-L09C185B130,FRD-L09C432B131,FRD-L09C636B130,FRD-L14C567B162,FRD-L19C10B130,FRD-L19C432B131,FRD-L19C636B130 have a factory Reset Protection (FRP) bypass security vulnerability. When re-configuring the mobile phone using the factory reset protection (FRP) function, an attacker can login the configuration flow by Swype Keyboard and can perform some operations to update the Google account. As a result, the FRP function is bypassed.
- Score
- CVSS 3.0 4.6 Medium
- Status
- Modified - psirt@huawei.com
- Published
- 2017-11-22
- Last modified
- 2024-09-16
- Weaknesses
- CWE-287
Affected products
- Berlin-l21 Firmware (Huawei)
- Berlin-l21hn Firmware (Huawei)
- Berlin-l22 Firmware (Huawei)
- Berlin-l22hn Firmware (Huawei)
- Berlin-l23 Firmware (Huawei)
- Berlin-l24hn Firmware (Huawei)
- Frd-l02 Firmware (Huawei)
- Frd-l04 Firmware (Huawei)
- Frd-l09 Firmware (Huawei)
- Frd-l14 Firmware (Huawei)
- Frd-l19 Firmware (Huawei)
- Berlin-l21berlin-l21hnberlin-l22berlin-l22hnberlin-l23berlin-l24hnfrd-l02frd-l04frd-l09frd-l14frd-l19 (Huawei Technologies Co. Ltd.)
References
- http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170920-01-frpbypass-en
