Vulnerability Description
There is a Factory Reset Protection (FRP) bypass security vulnerability in P20 Huawei smart phones versions before Emily-AL00A 9.0.0.167(C00E81R1P21T8). When re-configuring the mobile phone using the FRP function, an attacker can delete the activation lock after a series of operations. As a result, the FRP function is bypassed and the attacker gains access to the smartphone.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Huawei | P20 Firmware | < emily-al00a_9.0.0.167\(c00e81r1p21t8\) |
| Huawei | P20 | - |
References
- https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190228-01-smartpVendor Advisory
- https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190228-01-smartpVendor Advisory
FAQ
What is CVE-2019-5306?
CVE-2019-5306 is a vulnerability with a CVSS score of 4.6 (MEDIUM). There is a Factory Reset Protection (FRP) bypass security vulnerability in P20 Huawei smart phones versions before Emily-AL00A 9.0.0.167(C00E81R1P21T8). When re-configuring the mobile phone using the ...
How severe is CVE-2019-5306?
CVE-2019-5306 has been rated MEDIUM with a CVSS base score of 4.6/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2019-5306?
Check the references section above for vendor advisories and patch information. Affected products include: Huawei P20 Firmware, Huawei P20.