CVE-2019-19412: huawei alp-al00b_firmware

CVSS: 4.6v3.1MediumModified

Published 08-06-2020Last modified 05-08-2024

Vulnerability summary

CVE-2019-19412 is a medium (CVSS 4.6) vulnerability in huawei alp-al00b_firmware. EPSS estimates a 0.21% chance of exploitation in the next 30 days, higher than 11% of scored vulnerabilities.

Overall risk

18/100

0100

Low · default modelHow is this calculated?

CVSS score

4.6/10

010

Medium · v3.1 (NVD)

EPSS score

0.21%

0%100%

Low · 0.00 pp in 30 days

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits0No public exploits recorded

Timeline

08-06-2020
PublishedVulnerability first disclosed.
05-08-2024
Last modifiedVulnerability information updated.

Description

Huawei smart phones have a Factory Reset Protection (FRP) bypass security vulnerability. When re-configuring the mobile phone using the factory reset protection (FRP) function, an attacker login the Talkback mode and can perform some operations to install a third-Party application. Affected products can be found in https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200115-01-frp-en.

CVSS metrics

2 scores · 1 source · 2 versions

v3.14.6v2.02.1

EPSS trend

Probability

0.21%

Chance of exploitation in the next 30 days

Percentile

11%

Versus all other CVEs

30-day change

0.00 pp

From 0.21% on 19-09-2026

19-09-202619-10-2026

EPSS score

0.21%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Huawei32 products

alp-al00b_firmwareearlier than 9.0.0.181(C00E87R2P20T8) | < 9.0.0.181\(c00e87r2p20t8\)
alp-l09_firmwareearlier than 9.0.0.201(C432E4R1P9) | < 9.0.0.201\(c432e4r1p9\)
alp-l29_firmwareearlier than 9.0.0.177(C185E2R1P12T8) | earlier than 9.0.0.195(C636E2R1P12) | < 9.0.0.177\(c185e2r1p12t8\) | < 9.0.0.195\(c636e2r1p12\)
anne-al00_firmwareearlier than 8.0.0.168(C00) | < 8.0.0.168\(c00\)
berkeley-al20_firmwareearlier than 9.0.0.156(C00E156R2P14T8) | < 9.0.0.156\(c00e156r2p14t8\)

berkeley-l09_firmwareearlier than 8.0.0.172(C432) | earlier than 8.0.0.173(C636) | < 8.0.0.172\(c432\) | < 8.0.0.173\(c636\)
bla-al00b_firmwareearlier than 9.0.0.181(C00E88R2P15T8) | < 9.0.0.181\(c00e88r2p15t8\)
bla-l09c_firmwareearlier than 9.0.0.177(C185E2R1P13T8) | earlier than 9.0.0.206(C432E4R1P11) | < 9.0.0.177\(c185e2r1p13t8\) | < 9.0.0.206\(c432e4r1p11\)
bla-l29c_firmwareearlier than 9.0.0.179(C576E2R1P7T8) | earlier than 9.0.0.194(C185E2R1P13) | earlier than 9.0.0.206(C432E4R1P11) | earlier than 9.0.0.210(C635E4R1P13) | < 9.0.0.179\(c576e2r1p7t8\) | < 9.0.0.194\(c185e2r1p13\) | < 9.0.0.206\(c432e4r1p11\) | < 9.0.0.210\(c635e4r1p13\)
emily-l29c_firmwareearlier than 9.0.0.159(C185E2R1P12T8) | earlier than 9.0.0.159(C461E2R1P11T8) | earlier than 9.0.0.160(C432E7R1P11T8) | earlier than 9.0.0.165(C605E2R1P12) | earlier than 9.0.0.168(C636E7R1P13T8) | earlier than 9.0.0.168(C782E3R1P11T8) | earlier than 9.0.0.196(C635E2R1P11T8) | < 9.0.0.159\(c185e2r1p12t8\) | < 9.0.0.159\(c461e2r1p11t8\) | < 9.0.0.160\(c432e7r1p11t8\) | < 9.0.0.165\(c605e2r1p12\) | < 9.0.0.168\(c636e7r1p13t8\) | < 9.0.0.168\(c782e3r1p11t8\) | < 9.0.0.196\(c635e2r1p11t8\)
figo-l03_firmwareearlier than 9.1.0.130(C605E6R1P5T8) | < 9.1.0.130\(c605e6r1p5t8\)
figo-l21_firmwareearlier than 9.1.0.130(C185E6R1P5T8) | earlier than 9.1.0.130(C635E6R1P5T8) | < 9.1.0.130\(c185e6r1p5t8\) | < 9.1.0.130\(c635e6r1p5t8\)
figo-l23_firmwareearlier than 9.1.0.130(C605E6R1P5T8) | < 9.1.0.130\(c605e6r1p5t8\)
figo-l31_firmwareearlier than 9.1.0.130(C432E8R1P5T8) | < 9.1.0.130\(c432e8r1p5t8\)
florida-l03_firmwareearlier than 9.1.0.121(C605E5R1P1T8) | < 9.1.0.121\(c605e5r1p1t8\)
florida-l21_firmwareearlier than 8.0.0.129(C605) | earlier than 8.0.0.131(C432) | earlier than 8.0.0.132(C185) | < 8.0.0.129\(c605\) | < 8.0.0.131\(c432\) | < 8.0.0.132\(c185\)
florida-l22_firmwareearlier than 8.0.0.132(C636) | < 8.0.0.132\(c636\)
florida-l23_firmwareearlier than 8.0.0.144(C605) | < 8.0.0.144\(c605\)
honor_view_10_firmwareearlier than 9.0.0.202(C567E6R1P12T8) | < 9.0.0.202\(c567e6r1p12t8\)
huawei nova 3e,huawei p20 liteearlier than 8.0.0.147(C461) | earlier than 8.0.0.148(ZAFC185) | earlier than 8.0.0.160(C185) | earlier than 8.0.0.160(C605) | earlier than 8.0.0.168(C432) | earlier than 8.0.0.172(C636)
huawei p smartearlier than 9.1.0.130(C185E6R1P5T8) | earlier than 9.1.0.130(C605E6R1P5T8)
huawei p smart,huawei y7searlier than 9.1.0.124(C636E6R1P5T8)
huawei p20 liteearlier than 8.0.0.148(C635) | earlier than 8.0.0.155(C185) | earlier than 8.0.0.155(C605) | earlier than 8.0.0.156(C605) | earlier than 8.0.0.157(C432)
leland-al00a_firmwareearlier than 8.0.0.182(C00) | < 8.0.0.182\(c00\)
leland-l21a_firmwareearlier than 8.0.0.135(C185) | earlier than 9.1.0.118(C636E4R1P1T8) | < 8.0.0.135\(c185\) | < 9.1.0.118\(c636e4r1p1t8\)
leland-l22a_firmwareearlier than 9.1.0.118(C636E4R1P1T8) | < 9.1.0.118\(c636e4r1p1t8\)
leland-l22c_firmwareearlier than 9.1.0.118(C636E4R1P1T8) | < 9.1.0.118\(c636e4r1p1t8\)
leland-l31a_firmwareearlier than 8.0.0.139(C432) | < 8.0.0.139\(c432\)
nova_3e_firmware< 8.0.0.147\(c461\) | < 8.0.0.148\(zafc185\) | < 8.0.0.160\(c185\) | < 8.0.0.160\(c605\) | < 8.0.0.168\(c432\) | < 8.0.0.172\(c636\)
p_smart_firmware< 9.1.0.130\(c185e6r1p5t8\) | < 9.1.0.130\(c605e6r1p5t8\) | < 9.1.0.124\(c636e6r1p5t8\)
p20_lite_firmware< 8.0.0.148\(c635\) | < 8.0.0.155\(c185\) | < 8.0.0.155\(c605\) | < 8.0.0.156\(c605\) | < 8.0.0.157\(c432\) | < 8.0.0.147\(c461\) | < 8.0.0.148\(zafc185\) | < 8.0.0.160\(c185\) | < 8.0.0.160\(c605\) | < 8.0.0.168\(c432\) | < 8.0.0.172\(c636\)
y7s_firmware< 9.1.0.124\(c636e6r1p5t8\)

Show all 32

1 vendor · 32 products

References

1 links

www.huawei.com/en/psirt/security-advisories/huawei-sa-20200115-01-frp-enX Refsource CONFIRMVendor Advisory

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References

Related vulnerabilities