Some Huawei smart phones ALP-AL00B 8.0.0.106(C00), 8.0.0.113(SP2C00), 8.0.0.113(SP3C00), 8.0.0.113(SP7C00), 8.0.0.118(C00), 8.0.0.120(SP2C00), 8.0.0.125(SP1C00), 8.0.0.125(SP3C00), 8.0.0.126(SP2C00), 8.0.0.126(SP5C00), 8.0.0.127(SP1C00), 8.0.0.128(SP2C00), ALP-AL00B-RSC 1.0.0.2, BLA-TL00B 8.0.0.113(SP7C01), 8.0.0.118(C01), 8.0.0.120(SP2C01), 8.0.0.125(SP1C01), 8.0.0.125(SP2C01), 8.0.0.125(SP3C01), 8.0.0.126(SP2C01), 8.0.0.126(SP5C01), 8.0.0.127(SP1C01), 8.0.0.128(SP2C01), 8.0.0.129(SP2C01), Charlotte-AL00A 8.1.0.105(SP7C00), 8.1.0.106(SP3C00), 8.1.0.107(SP5C00), 8.1.0.107(SP7C00), 8.1.0.108(SP3C00), 8.1.0.108(SP6C00), 8.1.0.109(SP2C00), Emily-AL00A 8.1.0.105(SP6C00), 8.1.0.106(SP2C00), 8.1.0.107(SP5C00), 8.1.0.107(SP7C00), 8.1.0.108(SP2C00), 8.1.0.108(SP6C00), 8.1.0.109(SP5C00) have a Factory Reset Protection (FRP) bypass security vulnerability. When re-configuring the mobile phone using the factory reset protection (FRP) function, an attacker can login the configuration flow by Gaode Map and can perform some operations to update the Google account. As a result, the FRP function is bypassed.

Metrics

No CVSS v4.0

No CVSS v3.1

Attack Vector Physical

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact High

Availability Impact None

User Interaction None

Access Vector Local

Access Complexity Low

Authentication None

Confidentiality Impact None

Integrity Impact Complete

Availability Impact None

This CVE is not in the KEV list.

The EPSS score is 0.00027.

Key SSVC decision points have not yet been added.

Affected Vendors & Products

Vendors Products
Huawei
  • Alp-al00b
  • Alp-al00b-rsc
  • Alp-al00b-rsc Firmware
  • Alp-al00b Firmware
  • Bla-tl00b
  • Bla-tl00b Firmware
  • Charlotte-al00a
  • Charlotte-al00a Firmware
  • Emily-al00a
  • Emily-al00a Firmware

Configuration 1 [-]

AND
OR cpe:2.3:o:huawei:alp-al00b_firmware:8.0.0.106\(c00\):*:*:*:*:*:*:*
cpe:2.3:o:huawei:alp-al00b_firmware:8.0.0.113\(sp2c00\):*:*:*:*:*:*:*
cpe:2.3:o:huawei:alp-al00b_firmware:8.0.0.113\(sp3c00\):*:*:*:*:*:*:*
cpe:2.3:o:huawei:alp-al00b_firmware:8.0.0.113\(sp7c00\):*:*:*:*:*:*:*
cpe:2.3:o:huawei:alp-al00b_firmware:8.0.0.118\(c00\):*:*:*:*:*:*:*
cpe:2.3:o:huawei:alp-al00b_firmware:8.0.0.120\(sp2c00\):*:*:*:*:*:*:*
cpe:2.3:o:huawei:alp-al00b_firmware:8.0.0.125\(sp1c00\):*:*:*:*:*:*:*
cpe:2.3:o:huawei:alp-al00b_firmware:8.0.0.125\(sp3c00\):*:*:*:*:*:*:*
cpe:2.3:o:huawei:alp-al00b_firmware:8.0.0.126\(sp2c00\):*:*:*:*:*:*:*
cpe:2.3:o:huawei:alp-al00b_firmware:8.0.0.126\(sp5c00\):*:*:*:*:*:*:*
cpe:2.3:o:huawei:alp-al00b_firmware:8.0.0.127\(sp1c00\):*:*:*:*:*:*:*
cpe:2.3:o:huawei:alp-al00b_firmware:8.0.0.128\(sp2c00\):*:*:*:*:*:*:*
cpe:2.3:h:huawei:alp-al00b:-:*:*:*:*:*:*:*

Configuration 2 [-]

AND
cpe:2.3:o:huawei:alp-al00b-rsc_firmware:1.0.0.2:*:*:*:*:*:*:*
cpe:2.3:h:huawei:alp-al00b-rsc:-:*:*:*:*:*:*:*

Configuration 3 [-]

AND
OR cpe:2.3:o:huawei:bla-tl00b_firmware:8.0.0.113\(sp7c01\):*:*:*:*:*:*:*
cpe:2.3:o:huawei:bla-tl00b_firmware:8.0.0.118\(c01\):*:*:*:*:*:*:*
cpe:2.3:o:huawei:bla-tl00b_firmware:8.0.0.120\(sp2c01\):*:*:*:*:*:*:*
cpe:2.3:o:huawei:bla-tl00b_firmware:8.0.0.125\(sp1c01\):*:*:*:*:*:*:*
cpe:2.3:o:huawei:bla-tl00b_firmware:8.0.0.125\(sp2c01\):*:*:*:*:*:*:*
cpe:2.3:o:huawei:bla-tl00b_firmware:8.0.0.125\(sp3c01\):*:*:*:*:*:*:*
cpe:2.3:o:huawei:bla-tl00b_firmware:8.0.0.126\(sp2c01\):*:*:*:*:*:*:*
cpe:2.3:o:huawei:bla-tl00b_firmware:8.0.0.126\(sp5c01\):*:*:*:*:*:*:*
cpe:2.3:o:huawei:bla-tl00b_firmware:8.0.0.127\(sp1c01\):*:*:*:*:*:*:*
cpe:2.3:o:huawei:bla-tl00b_firmware:8.0.0.128\(sp2c01\):*:*:*:*:*:*:*
cpe:2.3:o:huawei:bla-tl00b_firmware:8.0.0.129\(sp2c01\):*:*:*:*:*:*:*
cpe:2.3:h:huawei:bla-tl00b:-:*:*:*:*:*:*:*

Configuration 4 [-]

AND
OR cpe:2.3:o:huawei:charlotte-al00a_firmware:8.1.0.105\(sp7c00\):*:*:*:*:*:*:*
cpe:2.3:o:huawei:charlotte-al00a_firmware:8.1.0.106\(sp3c00\):*:*:*:*:*:*:*
cpe:2.3:o:huawei:charlotte-al00a_firmware:8.1.0.107\(sp5c00\):*:*:*:*:*:*:*
cpe:2.3:o:huawei:charlotte-al00a_firmware:8.1.0.107\(sp7c00\):*:*:*:*:*:*:*
cpe:2.3:o:huawei:charlotte-al00a_firmware:8.1.0.108\(sp3c00\):*:*:*:*:*:*:*
cpe:2.3:o:huawei:charlotte-al00a_firmware:8.1.0.108\(sp6c00\):*:*:*:*:*:*:*
cpe:2.3:o:huawei:charlotte-al00a_firmware:8.1.0.109\(sp2c00\):*:*:*:*:*:*:*
cpe:2.3:h:huawei:charlotte-al00a:-:*:*:*:*:*:*:*

Configuration 5 [-]

AND
OR cpe:2.3:o:huawei:emily-al00a_firmware:8.1.0.105\(sp6c00\):*:*:*:*:*:*:*
cpe:2.3:o:huawei:emily-al00a_firmware:8.1.0.106\(sp2c00\):*:*:*:*:*:*:*
cpe:2.3:o:huawei:emily-al00a_firmware:8.1.0.107\(sp5c00\):*:*:*:*:*:*:*
cpe:2.3:o:huawei:emily-al00a_firmware:8.1.0.107\(sp7c00\):*:*:*:*:*:*:*
cpe:2.3:o:huawei:emily-al00a_firmware:8.1.0.108\(sp2c00\):*:*:*:*:*:*:*
cpe:2.3:o:huawei:emily-al00a_firmware:8.1.0.108\(sp6c00\):*:*:*:*:*:*:*
cpe:2.3:o:huawei:emily-al00a_firmware:8.1.0.109\(sp5c00\):*:*:*:*:*:*:*
cpe:2.3:h:huawei:emily-al00a:-:*:*:*:*:*:*:*

No data.

No data.

Advisories
Source ID Title
EUVD EUVD EUVD-2018-19623 Some Huawei smart phones ALP-AL00B 8.0.0.106(C00), 8.0.0.113(SP2C00), 8.0.0.113(SP3C00), 8.0.0.113(SP7C00), 8.0.0.118(C00), 8.0.0.120(SP2C00), 8.0.0.125(SP1C00), 8.0.0.125(SP3C00), 8.0.0.126(SP2C00), 8.0.0.126(SP5C00), 8.0.0.127(SP1C00), 8.0.0.128(SP2C00), ALP-AL00B-RSC 1.0.0.2, BLA-TL00B 8.0.0.113(SP7C01), 8.0.0.118(C01), 8.0.0.120(SP2C01), 8.0.0.125(SP1C01), 8.0.0.125(SP2C01), 8.0.0.125(SP3C01), 8.0.0.126(SP2C01), 8.0.0.126(SP5C01), 8.0.0.127(SP1C01), 8.0.0.128(SP2C01), 8.0.0.129(SP2C01), Charlotte-AL00A 8.1.0.105(SP7C00), 8.1.0.106(SP3C00), 8.1.0.107(SP5C00), 8.1.0.107(SP7C00), 8.1.0.108(SP3C00), 8.1.0.108(SP6C00), 8.1.0.109(SP2C00), Emily-AL00A 8.1.0.105(SP6C00), 8.1.0.106(SP2C00), 8.1.0.107(SP5C00), 8.1.0.107(SP7C00), 8.1.0.108(SP2C00), 8.1.0.108(SP6C00), 8.1.0.109(SP5C00) have a Factory Reset Protection (FRP) bypass security vulnerability. When re-configuring the mobile phone using the factory reset protection (FRP) function, an attacker can login the configuration flow by Gaode Map and can perform some operations to update the Google account. As a result, the FRP function is bypassed.
Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180822-01-frpbypass-en cve-icon cve-icon
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: huawei

Published:

Updated: 2024-08-05T06:37:59.589Z

Reserved: 2018-03-09T00:00:00

Link: CVE-2018-7911

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2018-10-23T14:29:04.437

Modified: 2024-11-21T04:12:57.430

Link: CVE-2018-7911

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.