CVE-2019-19412: Medium severity huawei alp-al00b-rsc firmware vulnerability

Q: What is the severity of CVE-2019-19412?

CVE-2019-19412 has a medium severity rating due to the potential exploitation for bypassing factory reset protection on affected Huawei devices.

Q: How do I fix CVE-2019-19412?

To fix CVE-2019-19412, ensure that your Huawei device firmware is updated to a version that addresses this vulnerability.

Q: Which Huawei devices are affected by CVE-2019-19412?

CVE-2019-19412 affects several Huawei device firmware versions, including ALP-AL00B, ALP-L09, ALP-L29, among others.

Q: What actions can an attacker perform through CVE-2019-19412?

An attacker can exploit CVE-2019-19412 to bypass Factory Reset Protection and install unauthorized third-party applications.

Q: Is there a permanent solution for CVE-2019-19412?

The permanent solution for CVE-2019-19412 involves applying the latest security updates provided by Huawei for affected devices.

Published Jun 8, 2020

Updated

Huawei smart phones have a Factory Reset Protection (FRP) bypass security vulnerability. When re-configuring the mobile phone using the factory reset protection (FRP) function, an attacker login the Talkback mode and can perform some operations to install a third-Party application. Affected products can be found in https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200115-01-frp-en.

Affected Software

89 affected components

Huawei Alp-al00b Firmware<9.0.0.181\(c00e87r2p20t8\)

Huawei ALP-AL00B

Huawei Alp-l09 Firmware<9.0.0.201\(c432e4r1p9\)

Huawei ALP-L09

Huawei Alp-l29 Firmware<9.0.0.177\(c185e2r1p12t8\)

Huawei ALP-L29

Huawei Alp-l29 Firmware<9.0.0.195\(c636e2r1p12\)

Huawei Anne-al00 Firmware<8.0.0.168\(c00\)

Huawei Anne-AL00

Huawei Bla-al00b Firmware<9.0.0.181\(c00e88r2p15t8\)

Huawei BLA-AL00B

Huawei Bla-l09c Firmware<9.0.0.177\(c185e2r1p13t8\)

Huawei BLA-L09C

Huawei Bla-l09c Firmware<9.0.0.206\(c432e4r1p11\)

Huawei Bla-l29c Firmware<9.0.0.179\(c576e2r1p7t8\)

Huawei BLA-L29C

Huawei Bla-l29c Firmware<9.0.0.194\(c185e2r1p13\)

Huawei Bla-l29c Firmware<9.0.0.206\(c432e4r1p11\)

Huawei Bla-l29c Firmware<9.0.0.210\(c635e4r1p13\)

Huawei Berkeley-al20 Firmware<9.0.0.156\(c00e156r2p14t8\)

Huawei Berkeley-AL20

Huawei Berkeley-l09 Firmware<8.0.0.172\(c432\)

Huawei Berkeley-L09

Huawei Berkeley-l09 Firmware<8.0.0.173\(c636\)

Huawei Emily-l29c Firmware<9.0.0.159\(c185e2r1p12t8\)

Huawei Emily-L29C

Huawei Emily-l29c Firmware<9.0.0.159\(c461e2r1p11t8\)

Huawei Emily-l29c Firmware<9.0.0.160\(c432e7r1p11t8\)

Huawei Emily-l29c Firmware<9.0.0.165\(c605e2r1p12\)

Huawei Emily-l29c Firmware<9.0.0.168\(c636e7r1p13t8\)

Huawei Emily-l29c Firmware<9.0.0.168\(c782e3r1p11t8\)

Huawei Emily-l29c Firmware<9.0.0.196\(c635e2r1p11t8\)

Huawei Figo-l03 Firmware<9.1.0.130\(c605e6r1p5t8\)

Huawei Figo-l03

Huawei Figo-l21 Firmware<9.1.0.130\(c185e6r1p5t8\)

Huawei Figo-l21

Huawei Figo-l21 Firmware<9.1.0.130\(c635e6r1p5t8\)

Huawei Figo-l23 Firmware<9.1.0.130\(c605e6r1p5t8\)

Huawei Figo-l23

Huawei Figo-l31 Firmware<9.1.0.130\(c432e8r1p5t8\)

Huawei Figo-l31

Huawei Florida-l03 Firmware<9.1.0.121\(c605e5r1p1t8\)

Huawei Florida-l03

Huawei Florida-l21 Firmware<8.0.0.129\(c605\)

Huawei Florida-l21

Huawei Florida-l21 Firmware<8.0.0.131\(c432\)

Huawei Florida-l21 Firmware<8.0.0.132\(c185\)

Huawei Florida-l22 Firmware<8.0.0.132\(c636\)

Huawei Florida-l22

Huawei Florida-l23 Firmware<8.0.0.144\(c605\)

Huawei Florida-l23

Huawei P Smart Firmware<9.1.0.130\(c185e6r1p5t8\)

Huawei P Smart

Huawei P Smart Firmware<9.1.0.130\(c605e6r1p5t8\)

Huawei P Smart Firmware<9.1.0.124\(c636e6r1p5t8\)

Huawei Y7s Firmware<9.1.0.124\(c636e6r1p5t8\)

Huawei Y7s

Huawei P20 Lite Firmware<8.0.0.148\(c635\)

Huawei P20 Lite

Huawei P20 Lite Firmware<8.0.0.155\(c185\)

Huawei P20 Lite Firmware<8.0.0.155\(c605\)

Huawei P20 Lite Firmware<8.0.0.156\(c605\)

Huawei P20 Lite Firmware<8.0.0.157\(c432\)

Huawei Nova 3e Firmware<8.0.0.147\(c461\)

Huawei Nova 3e

Huawei Nova 3e Firmware<8.0.0.148\(zafc185\)

Huawei Nova 3e Firmware<8.0.0.160\(c185\)

Huawei Nova 3e Firmware<8.0.0.160\(c605\)

Huawei Nova 3e Firmware<8.0.0.168\(c432\)

Huawei Nova 3e Firmware<8.0.0.172\(c636\)

Huawei P20 Lite Firmware<8.0.0.147\(c461\)

Huawei P20 Lite Firmware<8.0.0.148\(zafc185\)

Huawei P20 Lite Firmware<8.0.0.160\(c185\)

Huawei P20 Lite Firmware<8.0.0.160\(c605\)

Huawei P20 Lite Firmware<8.0.0.168\(c432\)

Huawei P20 Lite Firmware<8.0.0.172\(c636\)

Huawei Honor View 10 Firmware<9.0.0.202\(c567e6r1p12t8\)

Huawei Honor View 10

Huawei Leland-al00a Firmware<8.0.0.182\(c00\)

Huawei Leland-AL00A

Huawei Leland-l21a Firmware<8.0.0.135\(c185\)

Huawei Leland-l21a

Huawei Leland-l21a Firmware<9.1.0.118\(c636e4r1p1t8\)

Huawei Leland-l22a Firmware<9.1.0.118\(c636e4r1p1t8\)

Huawei Leland-l22a

Huawei Leland-l22c Firmware<9.1.0.118\(c636e4r1p1t8\)

Huawei Leland-l22c

Huawei Leland-l31a Firmware<8.0.0.139\(c432\)

Huawei Leland-l31a

Event History

Jun 8, 2020

CVE Published

via MITRE·06:21 PM

Data Sourced

via MITRE·06:21 PM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2019-19412?

CVE-2019-19412 has a medium severity rating due to the potential exploitation for bypassing factory reset protection on affected Huawei devices.

How do I fix CVE-2019-19412?

To fix CVE-2019-19412, ensure that your Huawei device firmware is updated to a version that addresses this vulnerability.

Which Huawei devices are affected by CVE-2019-19412?

CVE-2019-19412 affects several Huawei device firmware versions, including ALP-AL00B, ALP-L09, ALP-L29, among others.

What actions can an attacker perform through CVE-2019-19412?

An attacker can exploit CVE-2019-19412 to bypass Factory Reset Protection and install unauthorized third-party applications.

Is there a permanent solution for CVE-2019-19412?