4.6

CVE-2017-2721

Some Huawei smart phones with software Berlin-L21C10B130,Berlin-L21C185B133,Berlin-L21HNC10B131,Berlin-L21HNC185B140,Berlin-L21HNC432B151,Berlin-L22C636B160,Berlin-L22HNC636B130,Berlin-L22HNC675B150CUSTC675D001,Berlin-L23C605B131,Berlin-L24HNC567B110,FRD-L02C432B120,FRD-L02C635B130,FRD-L02C675B170CUSTC675D001,FRD-L04C567B162,FRD-L04C605B131,FRD-L09C10B130,FRD-L09C185B130,FRD-L09C432B131,FRD-L09C636B130,FRD-L14C567B162,FRD-L19C10B130,FRD-L19C432B131,FRD-L19C636B130 have a factory Reset Protection (FRP) bypass security vulnerability. When re-configuring the mobile phone using the factory reset protection (FRP) function, an attacker can login the configuration flow by Swype Keyboard and can perform some operations to update the Google account. As a result, the FRP function is bypassed.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Huawei ≫ Berlin-l21 Firmware Version berlin-l21c10b130
   Huawei ≫ Berlin-l21 Version -
Huawei ≫ Berlin-l21 Firmware Version berlin-l21c185b133
   Huawei ≫ Berlin-l21 Version -
Huawei ≫ Berlin-l21hn Firmware Version berlin-l21hnc10b131
   Huawei ≫ Berlin-l21hn Version -
Huawei ≫ Berlin-l21hn Firmware Version berlin-l21hnc185b140
   Huawei ≫ Berlin-l21hn Version -
Huawei ≫ Berlin-l21hn Firmware Version berlin-l21hnc432b151
   Huawei ≫ Berlin-l21hn Version -
Huawei ≫ Berlin-l22 Firmware Version berlin-l22c636b160
   Huawei ≫ Berlin-l22 Version -
Huawei ≫ Berlin-l22hn Firmware Version berlin-l22hnc636b130
   Huawei ≫ Berlin-l22hn Version -
Huawei ≫ Berlin-l22hn Firmware Version berlin-l22hnc675b150custc675d001
   Huawei ≫ Berlin-l22hn Version -
Huawei ≫ Berlin-l23 Firmware Version berlin-l23c605b131
   Huawei ≫ Berlin-l23 Version -
Huawei ≫ Berlin-l24hn Firmware Version berlin-l24hnc567b110
   Huawei ≫ Berlin-l24hn Version -
Huawei ≫ Frd-l02 Firmware Version frd-l02c432b120
   Huawei ≫ Frd-l02 Version -
Huawei ≫ Frd-l02 Firmware Version frd-l02c635b130
   Huawei ≫ Frd-l02 Version -
Huawei ≫ Frd-l02 Firmware Version frd-l02c675b170custc675d001
   Huawei ≫ Frd-l02 Version -
Huawei ≫ Frd-l04 Firmware Version frd-l04c567b162
   Huawei ≫ Frd-l04 Version -
Huawei ≫ Frd-l04 Firmware Version frd-l04c605b131
   Huawei ≫ Frd-l04 Version -
Huawei ≫ Frd-l09 Firmware Version frd-l09c10b130
   Huawei ≫ Frd-l09 Version -
Huawei ≫ Frd-l09 Firmware Version frd-l09c185b130
   Huawei ≫ Frd-l09 Version -
Huawei ≫ Frd-l09 Firmware Version frd-l09c432b131
   Huawei ≫ Frd-l09 Version -
Huawei ≫ Frd-l09 Firmware Version frd-l09c636b130
   Huawei ≫ Frd-l09 Version -
Huawei ≫ Frd-l14 Firmware Version frd-l14c567b162
   Huawei ≫ Frd-l14 Version -
Huawei ≫ Frd-l19 Firmware Version frd-l19c10b130
   Huawei ≫ Frd-l19 Version -
Huawei ≫ Frd-l19 Firmware Version frd-l19c432b131
   Huawei ≫ Frd-l19 Version -
Huawei ≫ Frd-l19 Firmware Version frd-l19c636b130
   Huawei ≫ Frd-l19 Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.2% 0.095
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 4.6 0.9 3.6
CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
NIST 2.1 3.9 2.9
AV:L/AC:L/Au:N/C:N/I:P/A:N
CWE-287 Improper Authentication

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170920-01-frpbypass-en
Vendor Advisory
Issue Tracking