Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2017-2721

Some Huawei smart phones with software Berlin-L21C10B130,Berlin-L21C185B133,Berlin-L21HNC10B131,Berlin-L21HNC185B140,Berlin-L21HNC432B151,Berlin-L22C636B160,Berlin-L22HNC636B130,Berlin-L22HNC675B150CUSTC675D001,Berlin-L23C605B131,Berlin-L24HNC567B110,FRD-L02C432B120,FRD-L02C635B130,FRD-L02C675B170CUSTC675D001,FRD-L04C567B162,FRD-L04C605B131,FRD-L09C10B130,FRD-L09C185B130,FRD-L09C432B131,FRD-L09C636B130,FRD-L14C567B162,FRD-L19C10B130,FRD-L19C432B131,FRD-L19C636B130 have a factory Reset Protection (FRP) bypass security vulnerability. When re-configuring the mobile phone using the factory reset protection (FRP) function, an attacker can login the configuration flow by Swype Keyboard and can perform some operations to update the Google account. As a result, the FRP function is bypassed.

Published

2017-11-22T19:29:01.397

Last Modified

2025-04-20T01:37:25.860

Status

Deferred

Source

[email protected]

Severity

CVSSv3.0: 4.6 (MEDIUM)

CVSSv2 Vector

AV:L/AC:L/Au:N/C:N/I:P/A:N

  • Access Vector: LOCAL
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: NONE
  • Integrity Impact: PARTIAL
  • Availability Impact: NONE
Exploitability Score

3.9

Impact Score

2.9

Weaknesses
  • Type: Primary
    CWE-287
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System huawei berlin-l21_firmware berlin-l21c10b130 Yes
Operating System huawei berlin-l21_firmware berlin-l21c185b133 Yes
Hardware huawei berlin-l21 - No
Operating System huawei berlin-l21hn_firmware berlin-l21hnc10b131 Yes
Operating System huawei berlin-l21hn_firmware berlin-l21hnc185b140 Yes
Operating System huawei berlin-l21hn_firmware berlin-l21hnc432b151 Yes
Hardware huawei berlin-l21hn - No
Operating System huawei berlin-l22_firmware berlin-l22c636b160 Yes
Hardware huawei berlin-l22 - No
Operating System huawei berlin-l22hn_firmware berlin-l22hnc636b130 Yes
Operating System huawei berlin-l22hn_firmware berlin-l22hnc675b150custc675d001 Yes
Hardware huawei berlin-l22hn - No
Operating System huawei berlin-l23_firmware berlin-l23c605b131 Yes
Hardware huawei berlin-l23 - No
Operating System huawei berlin-l24hn_firmware berlin-l24hnc567b110 Yes
Hardware huawei berlin-l24hn - No
Operating System huawei frd-l02_firmware frd-l02c432b120 Yes
Operating System huawei frd-l02_firmware frd-l02c635b130 Yes
Operating System huawei frd-l02_firmware frd-l02c675b170custc675d001 Yes
Hardware huawei frd-l02 - No
Operating System huawei frd-l04_firmware frd-l04c567b162 Yes
Operating System huawei frd-l04_firmware frd-l04c605b131 Yes
Hardware huawei frd-l04 - No
Operating System huawei frd-l09_firmware frd-l09c10b130 Yes
Operating System huawei frd-l09_firmware frd-l09c185b130 Yes
Operating System huawei frd-l09_firmware frd-l09c432b131 Yes
Operating System huawei frd-l09_firmware frd-l09c636b130 Yes
Hardware huawei frd-l09 - No
Operating System huawei frd-l14_firmware frd-l14c567b162 Yes
Hardware huawei frd-l14 - No
Operating System huawei frd-l19_firmware frd-l19c10b130 Yes
Operating System huawei frd-l19_firmware frd-l19c432b131 Yes
Operating System huawei frd-l19_firmware frd-l19c636b130 Yes
Hardware huawei frd-l19 - No
References