CVE-2017-2710 Security feature bypass in Beethoven-W09A, CRR-L09
Attackers can bypass Factory Reset Protection on Huawei devices to update the Google account, circumventing theft prevention measures.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2017-2710?
CVE-2017-2710 is a medium-severity vulnerability in Huawei Technologies Co., Ltd. Beethoven-W09A, CRR-L09, published on 22 Nov 2017. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
BTV-W09C229B002CUSTC229D005,BTV-W09C233B029, earlier than BTV-W09C100B006CUSTC100D002 versions, earlier than BTV-W09C128B003CUSTC128D002 versions, earlier than BTV-W09C199B002CUSTC199D002 versions, earlier than BTV-W09C209B005CUSTC209D001 versions, earlier than BTV-W09C331B002CUSTC331D001 versions, earlier than CRR-L09C432B390 versions, earlier than CRR-L09C605B355CUSTC605D003 versions have a Factory Reset Protection (FRP) bypass security vulnerability. When re-configuring the mobile phone using the factory reset protection (FRP) function, an attacker can perform some operations to update the Google account. As a result, the FRP function is bypassed.
Which versions are affected by CVE-2017-2710?
It affects 2 products.
Products include Huawei Beethoven-W09a Firmware, Huawei Crr-L09 Firmware.
How do I fix CVE-2017-2710?
No fix has been published for CVE-2017-2710 yet. Limit exposure of the affected software until one is available.
Is CVE-2017-2710 being exploited?
There is no known exploitation of CVE-2017-2710 in the wild and no public exploit code.
Sources
Also known as GHSA-p442-pxcc-px5g.