CVE-2019-5306
Medium
Description
There is a Factory Reset Protection (FRP) bypass security vulnerability in P20 Huawei smart phones versions before Emily-AL00A 9.0.0.167(C00E81R1P21T8). When re-configuring the mobile phone using the FRP function, an attacker can delete the activation lock after a series of operations. As a result, the FRP function is bypassed and the attacker gains access to the smartphone.
SeverityMedium
CVSS4.6
Exploit probability—
ProductHuawei P20 Firmware
PublishedJun 4, 2019
First seenJun 4, 2019
How to fix
Update
- huawei p20_firmwareemily-al00a_9.0.0.167\(c00e81r1p21t8\) or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| huawei p20_firmware | v < emily-al00a_9.0.0.167\(c00e81r1p21t8\) | emily-al00a_9.0.0.167\(c00e81r1p21t8\) |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.