4.6

CVE-2017-8173

Maya-L02,VKY-L09,VTR-L29,Vicky-AL00A,Victoria-AL00A,Warsaw-AL00 smart phones with software of earlier than Maya-L02C636B126 versions,earlier than VKY-L29C10B151 versions,earlier than VTR-L29C10B151 versions,earlier than Vicky-AL00AC00B162 versions,earlier than Victoria-AL00AC00B167 versions,earlier than Warsaw-AL00C00B200 versions have a Factory Reset Protection (FRP) bypass security vulnerability. When re-configuring the mobile phone using the factory reset protection (FRP) function, an attacker can login the configuration flow by some secret code and can perform some operations to update the Google account. As a result, the FRP function is bypassed.

Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Huawei ≫ Maya-l02 Firmware Version < maya-l02c636b126
   Huawei ≫ Maya-l02 Version-
Huawei ≫ Vky-l09 Firmware Version < vky-l29c10b151
   Huawei ≫ Vky-l09 Version-
Huawei ≫ Vky-l29 Firmware Version < vtr-l29c10b151
   Huawei ≫ Vky-l29 Version-
Huawei ≫ Vicky-al00a Firmware Version < vicky-al00ac00b162
   Huawei ≫ Vicky-al00a Version-
Huawei ≫ Victoria-al00a Firmware Version < victoria-al00ac00b167
   Huawei ≫ Victoria-al00a Version-
Huawei ≫ Warsaw-al00 Firmware Version < warsaw-al00c00b200
   Huawei ≫ Warsaw-al00 Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.02% 0.035
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 4.6 0.9 3.6
CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
nvd@nist.gov 2.1 3.9 2.9
AV:L/AC:L/Au:N/C:N/I:P/A:N