CVE-2019-5220
Medium
Description
There is a Factory Reset Protection (FRP) bypass vulnerability on several smartphones. The system does not sufficiently verify the permission, an attacker could do a certain operation on certain step of setup wizard. Successful exploit could allow the attacker bypass the FRP protection. Affected products: Mate 20 X, versions earlier than Ever-AL00B 9.0.0.200(C00E200R2P1); Mate 20, versions earlier than Hima-AL00B/Hima-TL00B 9.0.0.200(C00E200R2P1); Honor Magic 2, versions earlier than Tony-AL00B/Tony-TL00B 9.0.0.182(C00E180R2P2).
SeverityMedium
CVSS4.6
Exploit probability—
ProductHuawei Mate 20 X Firmware
PublishedJul 10, 2019
First seenJul 10, 2019
How to fix
Update
- huawei mate_20_x_firmwareever-al00b_9.0.0.200\(c00e200r2p1\) or later
- huawei mate_20_firmwarehima-al00b\/hima-tl00b_9.0.0.200\(c00e200r2p1\) or later
- huawei honor_magic_2_firmwaretony-al00b\/tony-tl00b_9.0.0.182\(c00e180r2p2\) or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| huawei mate_20_x_firmware | v < ever-al00b_9.0.0.200\(c00e200r2p1\) | ever-al00b_9.0.0.200\(c00e200r2p1\) |
| huawei mate_20_firmware | v < hima-al00b\/hima-tl00b_9.0.0.200\(c00e200r2p1\) | hima-al00b\/hima-tl00b_9.0.0.200\(c00e200r2p1\) |
| huawei honor_magic_2_firmware | v < tony-al00b\/tony-tl00b_9.0.0.182\(c00e180r2p2\) | tony-al00b\/tony-tl00b_9.0.0.182\(c00e180r2p2\) |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.