Medium severity · published Jul 10, 2019
CVE-2019-5220
There is a Factory Reset Protection (FRP) bypass vulnerability on several smartphones
4.6
CVSS
0.2%
EPSS
No
On KEV
Description
There is a Factory Reset Protection (FRP) bypass vulnerability on several smartphones. The system does not sufficiently verify the permission, an attacker could do a certain operation on certain step of setup wizard. Successful exploit could allow the attacker bypass the FRP protection. Affected products: Mate 20 X, versions earlier than Ever-AL00B 9.0.0.200(C00E200R2P1); Mate 20, versions earlier than Hima-AL00B/Hima-TL00B 9.0.0.200(C00E200R2P1); Honor Magic 2, versions earlier than Tony-AL00B/Tony-TL00B 9.0.0.182(C00E180R2P2).
CVSS vector
CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Attack vector
Physical
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
None
Integrity
High
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 13% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
HM
Honor Magic 2 Firmware · Huawei
before tony-al00b\/tony-tl00b_9.0.0.182\(c00e180r2p2\) · source: NVD
M2
Mate 20 Firmware · Huawei
before hima-al00b\/hima-tl00b_9.0.0.200\(c00e200r2p1\) · source: NVD
M2
Mate 20 X Firmware · Huawei
before ever-al00b_9.0.0.200\(c00e200r2p1\) · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2019-5220
CVE.org
https://www.cve.org/CVERecord?id=CVE-2019-5220
Vendor Advisory
https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190626-01-frp-en
More from Honor Magic 2 Firmware
6.8
CVE-2020-9244
HUAWEI Mate 20 versions Versions earlier than 10.1.0.160(C00E160R3P8);HUAWEI Mate 20 Pro versions Versions earlier than 10.1.0.270(C431E7R1P5),Versions earlier than…
5.5
CVE-2019-5222
There is an information disclosure vulnerability on Secure Input of certain Huawei smartphones in Versions earlier than Tony-AL00B 9.1.0.216(C00E214R2P1)