CVEvulnerability

CVE-2017-2721

4.6 MEDIUM Published 2017-11-22 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2017-11-22
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
4.6 MEDIUM — CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
CVSS 2.0 ([email protected])
2.1 LOW — AV:L/AC:L/Au:N/C:N/I:P/A:N
Weaknesses
CWE-287

Description

Some Huawei smart phones with software Berlin-L21C10B130,Berlin-L21C185B133,Berlin-L21HNC10B131,Berlin-L21HNC185B140,Berlin-L21HNC432B151,Berlin-L22C636B160,Berlin-L22HNC636B130,Berlin-L22HNC675B150CUSTC675D001,Berlin-L23C605B131,Berlin-L24HNC567B110,FRD-L02C432B120,FRD-L02C635B130,FRD-L02C675B170CUSTC675D001,FRD-L04C567B162,FRD-L04C605B131,FRD-L09C10B130,FRD-L09C185B130,FRD-L09C432B131,FRD-L09C636B130,FRD-L14C567B162,FRD-L19C10B130,FRD-L19C432B131,FRD-L19C636B130 have a factory Reset Protection (FRP) bypass security vulnerability. When re-configuring the mobile phone using the factory reset protection (FRP) function, an attacker can login the configuration flow by Swype Keyboard and can perform some operations to update the Google account. As a result, the FRP function is bypassed.

Affected configurations

• huawei berlin-l21 firmware berlin-l21c10b130 • huawei berlin-l21 firmware berlin-l21c185b133 • huawei berlin-l21hn firmware berlin-l21hnc10b131 • huawei berlin-l21hn firmware berlin-l21hnc185b140 • huawei berlin-l21hn firmware berlin-l21hnc432b151 • huawei berlin-l22 firmware berlin-l22c636b160 • huawei berlin-l22hn firmware berlin-l22hnc636b130 • huawei berlin-l22hn firmware berlin-l22hnc675b150custc675d001 • huawei berlin-l23 firmware berlin-l23c605b131 • huawei berlin-l24hn firmware berlin-l24hnc567b110 • huawei frd-l02 firmware frd-l02c432b120 • huawei frd-l02 firmware frd-l02c635b130 • huawei frd-l02 firmware frd-l02c675b170custc675d001 • huawei frd-l04 firmware frd-l04c567b162 • huawei frd-l04 firmware frd-l04c605b131 • huawei frd-l09 firmware frd-l09c10b130 • huawei frd-l09 firmware frd-l09c185b130 • huawei frd-l09 firmware frd-l09c432b131 • huawei frd-l09 firmware frd-l09c636b130 • huawei frd-l14 firmware frd-l14c567b162 • huawei frd-l19 firmware frd-l19c10b130 • huawei frd-l19 firmware frd-l19c432b131 • huawei frd-l19 firmware frd-l19c636b130

Related

Weakness · CWE (1)

  • CWE-287 Improper Authentication weakness

References