Vulnerabilities > CVE-2019-5283 - Unspecified vulnerability in Huawei P20 Firmware

CVSS 4.6 - MEDIUM

Attack vector

PHYSICAL

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

HIGH

Availability impact

NONE

low complexity

huawei

NVD

Published: 2019-06-04

Updated: 2020-08-24

Summary

There is Factory Reset Protection (FRP) bypass security vulnerability in P20 Huawei smart phones versions earlier than Emily-AL00A 9.0.0.167 (C00E81R1P21T8). When re-configuring the mobile phone using the factory reset protection (FRP) function, an attacker can login the Talkback mode and can perform some operations to access the setting page. As a result, the FRP function is bypassed.

Vulnerable Configurations

Part	Description	Count
OS	Huawei Huawei P20 Firmware - Huawei P20 Firmware 8.0.1.16\(C00\) Huawei P20 Firmware 8.1.0.109 Huawei P20 Firmware 8.1.0.120 Huawei P20 Firmware 8.1.0.121 Huawei P20 Firmware 8.1.0.128 Huawei P20 Firmware 8.1.0.130 Huawei P20 Firmware 8.1.0.171\(C00\) Huawei P20 Firmware 9.1.0.312\(C00E312R1P1T8\) Huawei P20 Firmware 9.1.0.333\(C00E333R1P1T8\) Huawei P20 Firmware 10.0.0.156\(C00E156R1P4\) Huawei P20 Firmware 10.0.0.162\(C00E156R1P4\)	12
Hardware	Huawei Huawei P20 *	1

References

https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190424-01-frp-en