First published: Tue Jun 04 2019(Updated: )
Emily-L29C Huawei phones versions earlier than 9.0.0.159 (C185E2R1P12T8) have a Factory Reset Protection (FRP) bypass security vulnerability. Before the FRP account is verified and activated during the reset process, the attacker can perform some special operations to bypass the FRP function and obtain the right to use the mobile phone.
Credit: psirt@huawei.com
Affected Software | Affected Version | How to fix |
---|---|---|
Huawei Emily-l29c Firmware | <9.0.0.159 | |
Huawei Emily-l29c |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2019-5297 is a security vulnerability found in Huawei phones running version earlier than 9.0.0.159 (C185E2R1P12T8).
CVE-2019-5297 has a severity rating of 4.6, which is considered medium.
CVE-2019-5297 allows an attacker to bypass the Factory Reset Protection (FRP) function on Huawei phones running versions earlier than 9.0.0.159 (C185E2R1P12T8).
Yes, the FRP bypass vulnerability can be fixed by updating Huawei phones to version 9.0.0.159 (C185E2R1P12T8) or later.
You can find more information about CVE-2019-5297 on the Huawei website: [https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190305-01-frp-en](https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190305-01-frp-en)