CVE-2017-8161

N/A

Published: November 22, 2017 at 07:00 PM UTC

Updated: June 17, 2026 at 01:25 AM UTC

1 product affected across 1 vendorEVA-L09

Using EVA-L09 by Huawei Technologies Co., Ltd.?

Get instant alerts when new vulnerabilities affect EVA-L09 - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

N/A

Exploit prediction

EPSS 0.2%

Description

EVA-L09 smartphones with software Earlier than EVA-L09C25B150CUSTC25D003 versions,Earlier than EVA-L09C440B140 versions,Earlier than EVA-L09C464B361 versions,Earlier than EVA-L09C675B320CUSTC675D004 versions have Factory Reset Protection (FRP) bypass security vulnerability. When re-configuring the mobile phone using the factory reset protection (FRP) function, an attacker can login the Swype and can perform some operations to update the Google account. As a result, the FRP function is bypassed.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

EVA-L09 · Huawei

95%

v < eva-l09c25b150custc25d003v < eva-l09c440b140v < eva-l09c464b361v < l09c675b320custc675d004Earlier than EVA-L09C25B150CUSTC25D003 versions,Earlier than EVA-L09C440B140 versions,Earlier than EVA-L09C464B361 versions,Earlier than EVA-L09C675B320CUSTC675D004 versions

Affected range stops below eva-l09c25b150custc25d003, so it looks safe — our inference, not a vendor statement

Affected range stops below eva-l09c440b140, so it looks safe — our inference, not a vendor statement

Affected range stops below eva-l09c464b361, so it looks safe — our inference, not a vendor statement

Affected range stops below l09c675b320custc675d004, so it looks safe — our inference, not a vendor statement

Remediation

No guide yet

No remediation guidance has been written for this CVE yet. What the record does show:

Patch and advisory references

http://www.huawei.com/en/psirt/security-advisories/2017/huawei-sa-20171013-01-frpbypass-en

References (1)

x_refsource_CONFIRMVendor Advisory

Source: [email protected]

http://www.huawei.com/en/psirt/security-advisories/2017/huawei-sa-20171013-01-frpbypass-en

CVSS

4.9MEDIUM[email protected]

Confidentiality: NONE
Integrity: COMPLETE
Availability: NONE

Vector?

Quick Info

StatusMODIFIED

CWE

CWE-668

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create account Sign in

Free plan, no card