CVSS 3.1
4.6 mediumCVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:NCVE-2019-19412
Medium (4.6) in huawei. EPSS 0.2% chance of exploitation in the next 30 days.
Huawei smart phones have a Factory Reset Protection (FRP) bypass security vulnerability. When re-configuring the mobile phone using the factory reset protection (FRP) function, an attacker login the Talkback mode and can perform some operations to install a third-Party application. Affected products can be found in https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200115-01-frp-en.
Severity
- EPSS
- 0.2% chance of exploitation in the next 30 days; higher than 11% of CVEs (scores of 2026-10-31)
- Published
- Modified
- Record from
- the NVD, synced
Affected
- huawei:alp-al00b_firmware
- huawei:alp-l09_firmware
- huawei:alp-l29_firmware
- huawei:anne-al00_firmware
- huawei:berkeley-al20_firmware
- huawei:berkeley-l09_firmware
- huawei:bla-al00b_firmware
- huawei:bla-l09c_firmware
- huawei:bla-l29c_firmware
- huawei:emily-l29c_firmware
- huawei:figo-l03_firmware
- huawei:figo-l21_firmware
- huawei:figo-l23_firmware
- huawei:figo-l31_firmware
- huawei:florida-l03_firmware
- huawei:florida-l21_firmware
- huawei:florida-l22_firmware
- huawei:florida-l23_firmware
- huawei:honor_view_10_firmware
- huawei:leland-al00a_firmware
- huawei:leland-l21a_firmware
- huawei:leland-l22a_firmware
- huawei:leland-l22c_firmware
- huawei:leland-l31a_firmware
- huawei:nova_3e_firmware
- huawei:p20_lite_firmware
- huawei:p_smart_firmware
- huawei:y7s_firmware