CVE-2017-8161

Published Nov 22, 2017

Last updated 5 years ago

CVSS medium 4.6

Overview

Description: EVA-L09 smartphones with software Earlier than EVA-L09C25B150CUSTC25D003 versions,Earlier than EVA-L09C440B140 versions,Earlier than EVA-L09C464B361 versions,Earlier than EVA-L09C675B320CUSTC675D004 versions have Factory Reset Protection (FRP) bypass security vulnerability. When re-configuring the mobile phone using the factory reset protection (FRP) function, an attacker can login the Swype and can perform some operations to update the Google account. As a result, the FRP function is bypassed.
Source: psirt@huawei.com
NVD status: Analyzed

Risk scores

CVSS 3.0

Type: Primary
Base score: 4.6
Impact score: 3.6
Exploitability score: 0.9
Vector string: CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Severity: MEDIUM

CVSS 2.0

Type: Primary
Base score: 4.9
Impact score: 6.9
Exploitability score: 3.9
Vector string: AV:L/AC:L/Au:N/C:N/I:C/A:N

Weaknesses

nvd@nist.gov: CWE-668

Hype score: Not currently trending

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:huawei:eva-l09:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "BEA0A8C6-485E-49D4-A924-2671F594EB7A",
            "versionEndExcluding": "eva-l09c25b150custc25d003"
          }
        ],
        "operator": "OR"
      },
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:h:huawei:eva-l09:-:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "A321BCC8-2C89-4D53-914D-3CDC1247E0FD"
          }
        ],
        "operator": "OR"
      }
    ],
    "operator": "AND"
  },
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:huawei:eva-l09:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "3A6644E1-0919-4B43-B2CE-9C05A42726B3",
            "versionEndExcluding": "eva-l09c440b140"
          }
        ],
        "operator": "OR"
      },
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:h:huawei:eva-l09:-:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "A321BCC8-2C89-4D53-914D-3CDC1247E0FD"
          }
        ],
        "operator": "OR"
      }
    ],
    "operator": "AND"
  },
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:huawei:eva-l09:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "5BB54335-DBFD-4062-BDA3-D595BA872DA5",
            "versionEndExcluding": "eva-l09c464b361"
          }
        ],
        "operator": "OR"
      },
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:h:huawei:eva-l09:-:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "A321BCC8-2C89-4D53-914D-3CDC1247E0FD"
          }
        ],
        "operator": "OR"
      }
    ],
    "operator": "AND"
  },
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:huawei:eva-l09:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "D09445B1-BEBB-47B2-8270-613E9DE14897",
            "versionEndExcluding": "l09c675b320custc675d004"
          }
        ],
        "operator": "OR"
      },
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:h:huawei:eva-l09:-:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "A321BCC8-2C89-4D53-914D-3CDC1247E0FD"
          }
        ],
        "operator": "OR"
      }
    ],
    "operator": "AND"
  }
]

Overview

Risk scores

CVSS 3.0

CVSS 2.0

Weaknesses

Social media

Configurations

References