Medium severity · published Jun 8, 2020
CVE-2019-19412
Huawei smart phones have a Factory Reset Protection (FRP) bypass security vulnerability
4.6
CVSS
0.2%
EPSS
No
On KEV
Description
Huawei smart phones have a Factory Reset Protection (FRP) bypass security vulnerability. When re-configuring the mobile phone using the factory reset protection (FRP) function, an attacker login the Talkback mode and can perform some operations to install a third-Party application. Affected products can be found in https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200115-01-frp-en.
CVSS vector
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Attack vector
Physical
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
None
Integrity
High
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 12% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AF
Alp-al00b Firmware · Huawei
before 9.0.0.181\(c00e87r2p20t8\) · source: NVD
AF
Alp-l09 Firmware · Huawei
before 9.0.0.201\(c432e4r1p9\) · source: NVD
AF
Alp-l29 Firmware · Huawei
before 9.0.0.177\(c185e2r1p12t8\); before 9.0.0.195\(c636e2r1p12\) · source: NVD
AF
Anne-al00 Firmware · Huawei
before 8.0.0.168\(c00\) · source: NVD
BF
Berkeley-al20 Firmware · Huawei
before 9.0.0.156\(c00e156r2p14t8\) · source: NVD
BF
Berkeley-l09 Firmware · Huawei
before 8.0.0.172\(c432\); before 8.0.0.173\(c636\) · source: NVD
BF
Bla-al00b Firmware · Huawei
before 9.0.0.181\(c00e88r2p15t8\) · source: NVD
BF
Bla-l09c Firmware · Huawei
before 9.0.0.177\(c185e2r1p13t8\); before 9.0.0.206\(c432e4r1p11\) · source: NVD
BF
Bla-l29c Firmware · Huawei
before 9.0.0.179\(c576e2r1p7t8\); before 9.0.0.194\(c185e2r1p13\); before 9.0.0.206\(c432e4r1p11\); before 9.0.0.210\(c635e4r1p13\) · source: NVD
EF
Emily-l29c Firmware · Huawei
before 9.0.0.159\(c185e2r1p12t8\); before 9.0.0.159\(c461e2r1p11t8\); before 9.0.0.160\(c432e7r1p11t8\); before 9.0.0.165\(c605e2r1p12\); before 9.0.0.168\(c636e7r1p13t8\); before 9.0.0.168\(c782e3r1p11t8\); +1 more · source: NVD
FF
Figo-l03 Firmware · Huawei
before 9.1.0.130\(c605e6r1p5t8\) · source: NVD
FF
Figo-l21 Firmware · Huawei
before 9.1.0.130\(c185e6r1p5t8\); before 9.1.0.130\(c635e6r1p5t8\) · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2019-19412
CVE.org
https://www.cve.org/CVERecord?id=CVE-2019-19412
Vendor Advisory
https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200115-01-frp-en
More from Alp-al00b Firmware
7.8
CVE-2019-2215
Android Kernel Use-After-Free Vulnerability
8.1
CVE-2019-9506
The Bluetooth BR/EDR specification up to and including version 5.1 permits sufficiently low encryption key length and does not prevent an attacker from influencing the key length…
6.8
CVE-2018-7910
Some Huawei smartphones ALP-AL00B 8.0.0.118D(C00), ALP-TL00B 8.0.0.118D(C01), BLA-AL00B 8.0.0.118D(C00), BLA-L09C 8.0.0.127(C432), 8.0.0.128(C432), 8.0.0.137(C432), BLA-L29C…
5.3
CVE-2019-5303
There are two denial of service vulnerabilities on some Huawei smartphones
5.3
CVE-2019-5302
There are two denial of service vulnerabilities on some Huawei smartphones