CVE-2019-19412 Security feature bypass in ALP-AL00B
Attackers can bypass Factory Reset Protection on Huawei smartphones via Talkback mode to install unauthorized third-party applications.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2019-19412?
CVE-2019-19412 is a medium-severity vulnerability in Huawei ALP-AL00B, published on 8 Jun 2020. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
Huawei smart phones have a Factory Reset Protection (FRP) bypass security vulnerability. When re-configuring the mobile phone using the factory reset protection (FRP) function, an attacker login the Talkback mode and can perform some operations to install a third-Party application. Affected products can be found in https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200115-01-frp-en.
Which versions are affected by CVE-2019-19412?
It affects 28 products.
Products include Huawei Alp-Al00b Firmware, Huawei Alp-L09 Firmware, Huawei Alp-L29 Firmware, Huawei Anne-Al00 Firmware, Huawei Berkeley-Al20 Firmware, Huawei Berkeley-L09 Firmware and 22 more.
How do I fix CVE-2019-19412?
No fix has been published for CVE-2019-19412 yet. Limit exposure of the affected software until one is available.
Is CVE-2019-19412 being exploited?
There is no known exploitation of CVE-2019-19412 in the wild and no public exploit code.
Other vulnerabilities in Huawei ALP-AL00B
- CVE-2018-7910 Auth bypass in ALP-AL00B, ALP-TL00B, BLA-AL00B, BLA-L09C, BLA-L29C
- CVE-2019-5302 Denial of service in ALP-AL00B
- CVE-2019-5303 Denial of service in ALP-AL00B
- CVE-2019-5235 Null dereference in Harry-AL00C, Harry-AL00C-PRELOAD, Harry-AL10B, Harry-LGRP1-CHN, Harry-TL00C, Jackman-AL00D, Jackman-L03, Jackman-L21, Jackman-L22, Jackman-L23, Johnson-AL00C, Johnson-AL00IC, Johnson-AL10C, Johnson-L21C, Johnson-L21D, Johnson-L22C, Johnson-L22D, Johnson-L23C, Johnson-L42IC, Johnson-L42IE, Johnson-L42IF, Johnson-TL00D, Johnson-TL00F, Potter-AL00C, Potter-AL10A, VOGUE-AL00A, VOGUE-AL00A-PRELOAD, VOGUE-AL10C, VOGUE-AL10C-PRELOAD, VOGUE-LGRP1-CHN, VOGUE-LGRP2-OVS, VOGUE-TL00B
- CVE-2018-7901 Security feature bypass in ALP-AL00B, BLA-AL00B
Sources
Also known as GHSA-gvv5-wgp2-xf56.