CVE Feed

    Dashboard / CVE / CVE-2019-19412

    CVE-2019-19412

    Huawei smart phones have a Factory Reset Protection (FRP) bypass security vulnerability. When re-configuring the mobile phone using the factory reset protection (FRP) function, an attacker login the Talkback mode and can perform some operations to install a third-Party application. Affected products can be found in https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200115-01-frp-en.

    Published:Jun 8, 2020
    Last Modified:Nov 21, 2024
    EPS:Jun 8, 2020
    EPSS Score:0.00027
    CVSS Score:4.6

    Affected Products

    Vendor
    Huawei
    Product
    Alp-al00b
    Vendor
    Huawei
    Product
    Alp-al00b Firmware
    Vendor
    Huawei
    Product
    Alp-l09
    Vendor
    Huawei
    Product
    Alp-l09 Firmware
    Vendor
    Huawei
    Product
    Alp-l29
    Vendor
    Huawei
    Product
    Alp-l29 Firmware
    Vendor
    Huawei
    Product
    Anne-al00
    Vendor
    Huawei
    Product
    Anne-al00 Firmware
    Vendor
    Huawei
    Product
    Berkeley-al20
    Vendor
    Huawei
    Product
    Berkeley-al20 Firmware
    Vendor
    Huawei
    Product
    Berkeley-l09
    Vendor
    Huawei
    Product
    Berkeley-l09 Firmware
    Vendor
    Huawei
    Product
    Bla-al00b
    Vendor
    Huawei
    Product
    Bla-al00b Firmware
    Vendor
    Huawei
    Product
    Bla-l09c
    Vendor
    Huawei
    Product
    Bla-l09c Firmware
    Vendor
    Huawei
    Product
    Bla-l29c
    Vendor
    Huawei
    Product
    Bla-l29c Firmware
    Vendor
    Huawei
    Product
    Emily-l29c
    Vendor
    Huawei
    Product
    Emily-l29c Firmware
    Vendor
    Huawei
    Product
    Figo-l03
    Vendor
    Huawei
    Product
    Figo-l03 Firmware
    Vendor
    Huawei
    Product
    Figo-l21
    Vendor
    Huawei
    Product
    Figo-l21 Firmware
    Vendor
    Huawei
    Product
    Figo-l23
    Vendor
    Huawei
    Product
    Figo-l23 Firmware
    Vendor
    Huawei
    Product
    Figo-l31
    Vendor
    Huawei
    Product
    Figo-l31 Firmware
    Vendor
    Huawei
    Product
    Florida-l03
    Vendor
    Huawei
    Product
    Florida-l03 Firmware
    Vendor
    Huawei
    Product
    Florida-l21
    Vendor
    Huawei
    Product
    Florida-l21 Firmware
    Vendor
    Huawei
    Product
    Florida-l22
    Vendor
    Huawei
    Product
    Florida-l22 Firmware
    Vendor
    Huawei
    Product
    Florida-l23
    Vendor
    Huawei
    Product
    Florida-l23 Firmware
    Vendor
    Huawei
    Product
    Honor View 10
    Vendor
    Huawei
    Product
    Honor View 10 Firmware
    Vendor
    Huawei
    Product
    Leland-al00a
    Vendor
    Huawei
    Product
    Leland-al00a Firmware
    Vendor
    Huawei
    Product
    Leland-l21a
    Vendor
    Huawei
    Product
    Leland-l21a Firmware
    Vendor
    Huawei
    Product
    Leland-l22a
    Vendor
    Huawei
    Product
    Leland-l22a Firmware
    Vendor
    Huawei
    Product
    Leland-l22c
    Vendor
    Huawei
    Product
    Leland-l22c Firmware
    Vendor
    Huawei
    Product
    Leland-l31a
    Vendor
    Huawei
    Product
    Leland-l31a Firmware
    Vendor
    Huawei
    Product
    Nova 3e
    Vendor
    Huawei
    Product
    Nova 3e Firmware
    Vendor
    Huawei
    Product
    P20 Lite
    Vendor
    Huawei
    Product
    P20 Lite Firmware
    Vendor
    Huawei
    Product
    P Smart
    Vendor
    Huawei
    Product
    P Smart Firmware
    Vendor
    Huawei
    Product
    Y7s
    Vendor
    Huawei
    Product
    Y7s Firmware

    Exploits

    No exploit reference

    Common Weakness Enumeration

    No CWE recorded yet

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2019-5303 (CVSS 5.3) — There are two denial of service vulnerabilities on some Huawei smartphones. An attacker may send specially cra…
    CVE-2019-5302 (CVSS 5.3) — There are two denial of service vulnerabilities on some Huawei smartphones. An attacker may send specially cra…
    CVE-2019-5235 (CVSS 5.3) — Some Huawei smart phones have a null pointer dereference vulnerability. An attacker crafts specific packets an…
    CVE-2019-2215 (CVSS 7.8) — A use-after-free in binder.c allows an elevation of privilege from an application to the Linux Kernel. No user…
    CVE-2019-9506 (CVSS 8.1) — The Bluetooth BR/EDR specification up to and including version 5.1 permits sufficiently low encryption key len…
    CVE-2018-7910 (CVSS 6.8) — Some Huawei smartphones ALP-AL00B 8.0.0.118D(C00), ALP-TL00B 8.0.0.118D(C01), BLA-AL00B 8.0.0.118D(C00), BLA-L…
    CVE-2018-7911 (CVSS 4.6) — Some Huawei smart phones ALP-AL00B 8.0.0.106(C00), 8.0.0.113(SP2C00), 8.0.0.113(SP3C00), 8.0.0.113(SP7C00), 8.…
    CVE-2018-7901 (CVSS 4.4) — RCS module in Huawei ALP-AL00B smart phones with software versions earlier than 8.0.0.129, BLA-AL00B smart pho…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High