Vulnerability Details : CVE-2017-8161
EVA-L09 smartphones with software Earlier than EVA-L09C25B150CUSTC25D003 versions,Earlier than EVA-L09C440B140 versions,Earlier than EVA-L09C464B361 versions,Earlier than EVA-L09C675B320CUSTC675D004 versions have Factory Reset Protection (FRP) bypass security vulnerability. When re-configuring the mobile phone using the factory reset protection (FRP) function, an attacker can login the Swype and can perform some operations to update the Google account. As a result, the FRP function is bypassed.
Exploit prediction scoring system (EPSS) score for CVE-2017-8161
Probability of exploitation activity in the next 30 days: 0.06%
Percentile, the proportion of vulnerabilities that are scored at or less: ~ 24 % EPSS Score History EPSS FAQ
CVSS scores for CVE-2017-8161
Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source |
---|---|---|---|---|---|
4.9
|
MEDIUM | AV:L/AC:L/Au:N/C:N/I:C/A:N |
3.9
|
6.9
|
NIST |
4.6
|
MEDIUM | CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N |
0.9
|
3.6
|
NIST |
CWE ids for CVE-2017-8161
-
The product exposes a resource to the wrong control sphere, providing unintended actors with inappropriate access to the resource.Assigned by: nvd@nist.gov (Primary)
References for CVE-2017-8161
-
http://www.huawei.com/en/psirt/security-advisories/2017/huawei-sa-20171013-01-frpbypass-en
Security Advisory - FRP Bypass Vulnerability in Huawei Smart PhonesVendor Advisory
Products affected by CVE-2017-8161
- cpe:2.3:o:huawei:eva-l09:*:*:*:*:*:*:*:*
- cpe:2.3:o:huawei:eva-l09:*:*:*:*:*:*:*:*
- cpe:2.3:o:huawei:eva-l09:*:*:*:*:*:*:*:*
- cpe:2.3:o:huawei:eva-l09:*:*:*:*:*:*:*:*