PT-2019-17569 · Huawei · P20

Published 2019-06-04 · Updated 2020-08-24 · CVE-2019-5306

Positive Technologies (AI Summary)

CVSS v3.1

4.6

Medium

Base vector

AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions P20 Huawei smart phones versions before Emily-AL00A 9.0.0.167(C00E81R1P21T8)

Description The issue concerns a Factory Reset Protection (FRP) bypass security vulnerability. When re-configuring the mobile phone using the FRP function, an attacker can delete the activation lock after a series of operations, resulting in the FRP function being bypassed and the attacker gaining access to the smartphone.

Recommendations For P20 Huawei smart phones versions before Emily-AL00A 9.0.0.167(C00E81R1P21T8), update to a version equal to or later than Emily-AL00A 9.0.0.167(C00E81R1P21T8) to resolve the issue.

Fix

Related Identifiers

CVE-2019-5306

Affected Products

P20

References · 3

• https://osv.dev/vulnerability/CVE-2019-5306 · Vendor Advisory
• https://huawei.com/en/psirt/security-advisories/huawei-sa-20190228-01-smartphone-en · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-5306 · Security Note