CVE-2019-19412

Description

Huawei smart phones have a Factory Reset Protection (FRP) bypass security vulnerability. When re-configuring the mobile phone using the factory reset protection (FRP) function, an attacker login the Talkback mode and can perform some operations to install a third-Party application. Affected products can be found in https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200115-01-frp-en.

4.6

CVSS

Severity: Medium

CVSS 3.1 •

CVSS 2.0 •

EPSS 0.03%

Vendor Advisory huawei.com

Affected: Huawei ALP-AL00B

Affected: Huawei ALP-L09

Affected: Huawei ALP-L29

Affected: Huawei Anne-AL00

Affected: Huawei BLA-AL00B

Affected: Huawei BLA-L09C

Affected: Huawei BLA-L29C

Affected: Huawei Berkeley-AL20

Affected: Huawei Berkeley-L09

Affected: Huawei Emily-L29C

Affected: Huawei Figo-L03

Affected: Huawei Figo-L21

Affected: Huawei Figo-L23

Affected: Huawei Figo-L31

Affected: Huawei Florida-L03

Affected: Huawei Florida-L21

Affected: Huawei Florida-L22

Affected: Huawei Florida-L23

Affected: Huawei HUAWEI P smart

Affected: Huawei HUAWEI P smart,HUAWEI Y7s

Affected: Huawei HUAWEI P20 lite

Affected: Huawei HUAWEI nova 3e,HUAWEI P20 lite

Affected: Huawei Honor View 10

Affected: Huawei Leland-AL00A

Affected: Huawei Leland-L21A

Affected: Huawei Leland-L22A

Affected: Huawei Leland-L22C

Affected: Huawei Leland-L31A

References

Link	Tags
https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200115-01-frp-en	vendor advisory

Frequently Asked Questions

What is the severity of CVE-2019-19412?: CVE-2019-19412 has been scored as a medium severity vulnerability.
How to fix CVE-2019-19412?: To fix CVE-2019-19412, make sure you are using an up-to-date version of the affected component(s) by checking the vendor release notes. As for now, there are no other specific guidelines available.
Is CVE-2019-19412 being actively exploited in the wild?: As for now, there are no information to confirm that CVE-2019-19412 is being actively exploited. According to its EPSS score, there is a ~0% probability that this vulnerability will be exploited by malicious actors in the next 30 days.
What software or system is affected by CVE-2019-19412?: CVE-2019-19412 affects Huawei ALP-AL00B, Huawei ALP-L09, Huawei ALP-L29, Huawei Anne-AL00, Huawei BLA-AL00B, Huawei BLA-L09C, Huawei BLA-L29C, Huawei Berkeley-AL20, Huawei Berkeley-L09, Huawei Emily-L29C, Huawei Figo-L03, Huawei Figo-L21, Huawei Figo-L23, Huawei Figo-L31, Huawei Florida-L03, Huawei Florida-L21, Huawei Florida-L22, Huawei Florida-L23, Huawei HUAWEI P smart, Huawei HUAWEI P smart,HUAWEI Y7s, Huawei HUAWEI P20 lite, Huawei HUAWEI nova 3e,HUAWEI P20 lite, Huawei Honor View 10, Huawei Leland-AL00A, Huawei Leland-L21A, Huawei Leland-L22A, Huawei Leland-L22C, Huawei Leland-L31A.