There is a Factory Reset Protection (FRP) bypass vulnerability on several smartphones. The system does not sufficiently verify the permission, an attacker could do a certain operation on certain step of setup wizard. Successful exploit could allow the attacker bypass the FRP prot
There is a Factory Reset Protection (FRP) bypass vulnerability on several smartphones. The system does not sufficiently verify the permission, an attacker could do a certain operation on certain step of setup wizard. Successful exploit could allow the attacker bypass the FRP protection. Affected products: Mate 20 X, versions earlier than Ever-AL00B 9.0.0.200(C00E200R2P1); Mate 20, versions…
| Vendor | Product | Versions |
|---|---|---|
| Huawei | Mate 20 X | Versions earlier than Ever-AL00B 9.0.0.200(C00E200R2P1) |
| Huawei | Mate 20 | Versions earlier than Hima-AL00B/Hima-TL00B 9.0.0.200(C00E200R2P1) |
| Huawei | Honor Magic 2 | Versions earlier than Tony-AL00B/Tony-TL00B 9.0.0.182(C00E180R2P2) |
Not currently listed on the CISA Known Exploited Vulnerabilities (KEV) catalog. EPSS is the best forward-looking signal — see the EPSS row above.
For the full vendor write-up, exploit chains, and reference implementations, see the references list in section 09.
Ask SARA in chat to draft a starting detection for this CVE in your stack of choice.
No directly-cited follow-up CVEs in the KB record for this advisory. The references list in section 09 carries the vendor cross-references.