CVE-2019-5306

There is a Factory Reset Protection (FRP) bypass security vulnerability in P20 Huawei smart phones versions before Emily-AL00A 9.0.0.167(C00E81R1P21T8). When re-configuring the mobile phone using the FRP function, an attacker can delete the activation lock after a series of operations. As a result, the FRP function is bypassed and the attacker gains access to the smartphone.

Score

CVSS 3.0 4.6 Medium

Status

Modified - psirt@huawei.com

Published

2019-06-04

Last modified

2024-08-04

Affected products

• P20 (Huawei)
• P20 Firmware (Huawei)

References

• https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190228-01-smartphone-en