Vulnerabilities > CVE-2019-5297 - Unspecified vulnerability in Huawei Emily-L29C Firmware

CVSS 4.6 - MEDIUM

Attack vector

PHYSICAL

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

HIGH

Availability impact

NONE

low complexity

huawei

NVD

Published: 2019-06-04

Updated: 2020-08-24

Summary

Emily-L29C Huawei phones versions earlier than 9.0.0.159 (C185E2R1P12T8) have a Factory Reset Protection (FRP) bypass security vulnerability. Before the FRP account is verified and activated during the reset process, the attacker can perform some special operations to bypass the FRP function and obtain the right to use the mobile phone.

Vulnerable Configurations

Part	Description	Count
OS	Huawei Huawei Emily L29C Firmware - Huawei Emily L29C Firmware 8.1.0.132A\(C432\) Huawei Emily L29C Firmware 8.1.0.135\(C782\) Huawei Emily L29C Firmware 8.1.0.154\(C10\) Huawei Emily L29C Firmware 8.1.0.154\(C461\) Huawei Emily L29C Firmware 8.1.0.154\(C635\) Huawei Emily L29C Firmware 8.1.0.156\(C185\) Huawei Emily L29C Firmware 8.1.0.156\(C605\) Huawei Emily L29C Firmware 8.1.0.159\(C636\)	9
Hardware	Huawei Huawei Emily L29C -	1

References

https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190305-01-frp-en