rainbutterfly/cve_corpus huggingface dataset:
CVE-2017-2665 
The skyring-setup command creates random password for mongodb skyring database but it writes password in plain text to /etc/skyring/skyring.conf file which is owned by root but read by local user. Any local user who has access to system running skyring service will be able to get password in plain text.
Problem types: cwe_id: CWE-522
description: CWE-522
Affected products: vendor: [UNKNOWN]
product: rhscon-core
Published: 2018-07-06T13:00:00.000Z
CVE-2017-2666 
It was discovered in Undertow that the code that parsed the HTTP request line permitted invalid characters. This could be exploited, in conjunction with a proxy that also permitted the invalid characters but with a different interpretation, to inject data into the HTTP response. By manipulating the HTTP response the attacker could poison a web-cache, perform an XSS attack, or obtain sensitive information from requests other than their own.
Problem types: cwe_id: CWE-444
description: CWE-444
Affected products: vendor: [UNKNOWN]
product: undertow
Published: 2018-07-27T14:00:00.000Z
CVE-2017-2667 
Hammer CLI, a CLI utility for Foreman, before version 0.10.0, did not explicitly set the verify_ssl flag for apipie-bindings that disable it by default. As a result the server certificates are not checked and connections are prone to man-in-the-middle attacks.
Problem types: cwe_id: CWE-345
description: CWE-345
Affected products: vendor: Foreman
product: Hammer CLI
Published: 2018-03-12T15:00:00.000Z
CVE-2017-2668 
389-ds-base before versions 1.3.5.17 and 1.3.6.10 is vulnerable to an invalid pointer dereference in the way LDAP bind requests are handled. A remote unauthenticated attacker could use this flaw to make ns-slapd crash via a specially crafted LDAP bind request, resulting in denial of service.
Problem types: cwe_id: CWE-119
description: CWE-119
Affected products: vendor: [UNKNOWN]
product: 389-ds-base
Published: 2018-06-22T13:00:00.000Z
CVE-2017-2669 
Dovecot before version 2.2.29 is vulnerable to a denial of service. When 'dict' passdb and userdb were used for user authentication, the username sent by the IMAP/POP3 client was sent through var_expand() to perform %variable expansion. Sending specially crafted %variable fields could result in excessive memory usage causing the process to crash (and restart), or excessive CPU usage causing all authentications to hang.
Problem types: cwe_id: CWE-20
description: CWE-20
Affected products: vendor: [UNKNOWN]
product: dovecot
Published: 2018-06-21T13:00:00.000Z
CVE-2017-2670 
It was found in Undertow before 1.3.28 that with non-clean TCP close, the Websocket server gets into infinite loop on every IO thread, effectively causing DoS.
Problem types: cwe_id: CWE-835
description: CWE-835
Affected products: vendor: [UNKNOWN]
product: undertow
Published: 2018-07-27T15:00:00.000Z
CVE-2017-2671 
The ping_unhash function in net/ipv4/ping.c in the Linux kernel through 4.10.8 is too late in obtaining a certain lock and consequently cannot ensure that disconnect function calls are safe, which allows local users to cause a denial of service (panic) by leveraging access to the protocol value of IPPROTO_ICMP in a socket system call.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-05T06:23:00.000Z
CVE-2017-2672 
A flaw was found in foreman before version 1.15 in the logging of adding and registering images. An attacker with access to the foreman log file would be able to view passwords for provisioned systems in the log file, allowing them to access those systems.
Problem types: cwe_id: CWE-312
description: CWE-312
Affected products: vendor: [UNKNOWN]
product: foreman
Published: 2018-06-21T13:00:00.000Z
CVE-2017-2673 
An authorization-check flaw was discovered in federation configurations of the OpenStack Identity service (keystone). An authenticated federated user could request permissions to a project and unintentionally be granted all related roles including administrative roles.
Problem types: cwe_id: CWE-863
description: CWE-863
Affected products: vendor: [UNKNOWN]
product: openstack-keystone
Published: 2018-07-19T13:00:00.000Z
CVE-2017-2674 
JBoss BRMS 6 and BPM Suite 6 before 6.4.3 are vulnerable to a stored XSS via several lists in Business Central. The flaw is due to lack of sanitation of user input when creating new lists. Remote, authenticated attackers that have privileges to create lists can store scripts in them, which are not properly sanitized before showing to other users, including admins.
Problem types: cwe_id: CWE-20
description: CWE-20
Affected products: vendor: Red Hat
product: business-central
Published: 2018-07-27T18:00:00.000Z
CVE-2017-2675 
Little Snitch version 3.0 through 3.7.3 suffer from a local privilege escalation vulnerability in the installer part. The vulnerability is related to the installation of the configuration file "at.obdev.littlesnitchd.plist" which gets installed to /Library/LaunchDaemons.
Problem types: description: unspecified
Affected products: vendor: Objective Development Software GmbH
product: Little Snitch
Published: 2017-04-06T15:00:00.000Z
CVE-2017-2682 
The Siemens web application RUGGEDCOM NMS < V1.2 on port 8080/TCP and 8081/TCP could allow a remote attacker to perform a Cross-Site Request Forgery (CSRF) attack, potentially allowing an attacker to execute administrative operations, provided the targeted user has an active session and is induced to trigger a malicious request.
Problem types: cwe_id: CWE-352
description: CWE-352: Cross-Site Request Forgery (CSRF)
Affected products: vendor: n/a
product: RUGGEDCOM NMS All versions < V2.1 (Windows and Linux)
Published: 2017-02-27T11:00:00.000Z
CVE-2017-2683 
A non-privileged user of the Siemens web application RUGGEDCOM NMS < V1.2 on port 8080/TCP and 8081/TCP could perform a persistent Cross-Site Scripting (XSS) attack, potentially resulting in obtaining administrative permissions.
Problem types: cwe_id: CWE-79
description: CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Affected products: vendor: n/a
product: RUGGEDCOM NMS All versions < V2.1 (Windows and Linux)
Published: 2017-02-27T11:00:00.000Z
CVE-2017-2684 
Siemens SIMATIC Logon prior to V1.5 SP3 Update 2 could allow an attacker with knowledge of a valid user name, and physical or network access to the affected system, to bypass the application-level authentication.
Problem types: cwe_id: CWE-592
description: CWE-592: Authentication Bypass Issues
Affected products: vendor: n/a
product: SIMATIC Logon All versions < V1.5 SP3 Update 2
Published: 2017-02-22T02:00:00.000Z
CVE-2017-2685 
Siemens SINUMERIK Integrate Operate Clients between 2.0.3.00.016 (including) and 2.0.6 (excluding) and between 3.0.4.00.032 (including) and 3.0.6 (excluding) contain a vulnerability that could allow an attacker to read and manipulate data in TLS sessions while performing a man-in-the-middle (MITM) attack.
Problem types: cwe_id: CWE-693
description: CWE-693: Protection Mechanism Failure
Affected products: vendor: n/a
product: SINUMERIK Integrate Operate Clients 2.x and 3.x
Published: 2017-03-01T17:00:00.000Z
CVE-2017-2686 
Siemens RUGGEDCOM ROX I (all versions) contain a vulnerability that could allow an authenticated user to read arbitrary files through the web interface at port 10000/TCP and access sensitive information.
Problem types: cwe_id: CWE-285
description: CWE-285: Improper Authorization
Affected products: vendor: n/a
product: RUGGEDCOM ROX I All versions
Published: 2017-03-29T01:00:00.000Z
CVE-2017-2687 
Siemens RUGGEDCOM ROX I (all versions) contain a vulnerability in the integrated web server at port 10000/TCP which is prone to reflected Cross-Site Scripting attacks if an unsuspecting user is induced to click on a malicious link.
Problem types: cwe_id: CWE-79
description: CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Affected products: vendor: n/a
product: RUGGEDCOM ROX I All versions
Published: 2017-03-29T01:00:00.000Z
CVE-2017-2688 
The integrated web server in Siemens RUGGEDCOM ROX I (all versions) at port 10000/TCP could allow remote attackers to perform actions with the privileges of an authenticated user, provided the targeted user has an active session and is induced into clicking on a malicious link or into visiting a malicious website, aka CSRF.
Problem types: cwe_id: CWE-352
description: CWE-352: Cross-Site Request Forgery (CSRF)
Affected products: vendor: n/a
product: RUGGEDCOM ROX I All versions
Published: 2017-03-29T01:00:00.000Z
CVE-2017-2689 
Siemens RUGGEDCOM ROX I (all versions) allow an authenticated user to bypass access restrictions in the web interface at port 10000/TCP to obtain privileged file system access or change configuration settings.
Problem types: cwe_id: CWE-285
description: CWE-285: Improper Authorization
Affected products: vendor: n/a
product: RUGGEDCOM ROX I All versions
Published: 2017-03-29T01:00:00.000Z
CVE-2017-2690 
SoftCo with software V200R003C20,eSpace U1910 with software V200R003C00, V200R003C20 and V200R003C30,eSpace U1911 with software V200R003C20, V200R003C30,eSpace U1930 with software V200R003C20 and V200R003C30,eSpace U1960 with software V200R003C20, V200R003C30,eSpace U1980 with software V200R003C20, V200R003C30,eSpace U1981 with software V200R003C20 and V200R003C30 have an denial of service (DoS) vulnerability, which allow an attacker with specific permission to craft a file containing malicious data and upload it to the device to exhaust memory, causing a DoS condition.
Problem types: description: DoS
Affected products: vendor: Huawei Technologies Co., Ltd.
product: SoftCo,eSpace U1910,eSpace U1911,eSpace U1930,eSpace U1960,eSpace U1980,eSpace U1981
Published: 2017-11-22T19:00:00.000Z
CVE-2017-2691 
Huawei P9 versions earlier before EVA-AL10C00B373, versions earlier before EVA-CL00C92B373, versions earlier before EVA-DL00C17B373, versions earlier before EVA-TL00C01B373 have a lock-screen bypass vulnerability. An unauthenticated attacker could force the phone to the fastboot mode and delete the user's password file during the reboot process, then login the phone without screen lock password after reboot.
Problem types: description: Lock-screen Bypass
Affected products: vendor: Huawei Technologies Co., Ltd.
product: Huawei P9
Published: 2017-11-22T19:00:00.000Z
CVE-2017-2692 
The Keyguard application in ALE-L02C635B140 and earlier versions,ALE-L02C636B140 and earlier versions,ALE-L21C10B150 and earlier versions,ALE-L21C185B200 and earlier versions,ALE-L21C432B214 and earlier versions,ALE-L21C464B150 and earlier versions,ALE-L21C636B200 and earlier versions,ALE-L23C605B190 and earlier versions,ALE-TL00C01B250 and earlier versions,ALE-UL00C00B250 and earlier versions,MT7-L09C605B325 and earlier versions,MT7-L09C900B339 and earlier versions,MT7-TL10C900B339 and earlier versions,CRR-CL00C92B172 and earlier versions,CRR-L09C432B180 and earlier versions,CRR-TL00C01B172 and earlier versions,CRR-UL00C00B172 and earlier versions,CRR-UL20C432B171 and earlier versions,GRA-CL00C92B230 and earlier versions,GRA-L09C432B222 and earlier versions,GRA-TL00C01B230SP01 and earlier versions,GRA-UL00C00B230 and earlier versions,GRA-UL00C10B201 and earlier versions,GRA-UL00C432B220 and earlier versions,H60-L04C10B523 and earlier versions,H60-L04C185B523 and earlier versions,H60-L04C636B527 and earlier versions,H60-L04C900B530 and earlier versions,PLK-AL10C00B220 and earlier versions,PLK-AL10C92B220 and earlier versions,PLK-CL00C92B220 and earlier versions,PLK-L01C10B140 and earlier versions,PLK-L01C185B130 and earlier versions,PLK-L01C432B187 and earlier versions,PLK-L01C432B190 and earlier versions,PLK-L01C432B190 and earlier versions,PLK-L01C636B130 and earlier versions,PLK-TL00C01B220 and earlier versions,PLK-TL01HC01B220 and earlier versions,PLK-UL00C17B220 and earlier versions,ATH-AL00C00B210 and earlier versions,ATH-AL00C92B200 and earlier versions,ATH-CL00C92B210 and earlier versions,ATH-TL00C01B210 and earlier versions,ATH-TL00HC01B210 and earlier versions,ATH-UL00C00B210 and earlier versions,RIO-AL00C00B220 and earlier versions,RIO-CL00C92B220 and earlier versions,RIO-TL00C01B220 and earlier versions,RIO-UL00C00B220 and earlier versions have a privilege elevation vulnerability. An attacker may exploit it to launch command injection in order to gain elevated privileges.
Problem types: description: privilege elevation
Affected products: vendor: Huawei Technologies Co., Ltd.
product: P8 Lite,Mate 7,Mate S,P8,honor 6,honor 7,SHOTX,G8,
Published: 2017-11-22T19:00:00.000Z
CVE-2017-2693 
ALE-L02C635B140 and earlier versions,ALE-L02C636B140 and earlier versions,ALE-L21C10B150 and earlier versions,ALE-L21C185B200 and earlier versions,ALE-L21C432B214 and earlier versions,ALE-L21C464B150 and earlier versions,ALE-L21C636B200 and earlier versions,ALE-L23C605B190 and earlier versions,ALE-TL00C01B250 and earlier versions,ALE-UL00C00B250 and earlier versions,MT7-L09C605B325 and earlier versions,MT7-L09C900B339 and earlier versions,MT7-TL10C900B339 and earlier versions,CRR-CL00C92B172 and earlier versions,CRR-L09C432B180 and earlier versions,CRR-TL00C01B172 and earlier versions,CRR-UL00C00B172 and earlier versions,CRR-UL20C432B171 and earlier versions,GRA-CL00C92B230 and earlier versions,GRA-L09C432B222 and earlier versions,GRA-TL00C01B230SP01 and earlier versions,GRA-UL00C00B230 and earlier versions,GRA-UL00C10B201 and earlier versions,GRA-UL00C432B220 and earlier versions,H60-L04C10B523 and earlier versions,H60-L04C185B523 and earlier versions,H60-L04C636B527 and earlier versions,H60-L04C900B530 and earlier versions,PLK-AL10C00B220 and earlier versions,PLK-AL10C92B220 and earlier versions,PLK-CL00C92B220 and earlier versions,PLK-L01C10B140 and earlier versions,PLK-L01C185B130 and earlier versions,PLK-L01C432B187 and earlier versions,PLK-L01C432B190 and earlier versions,PLK-L01C432B190 and earlier versions,PLK-L01C636B130 and earlier versions,PLK-TL00C01B220 and earlier versions,PLK-TL01HC01B220 and earlier versions,PLK-UL00C17B220 and earlier versions,ATH-AL00C00B210 and earlier versions,ATH-AL00C92B200 and earlier versions,ATH-CL00C92B210 and earlier versions,ATH-TL00C01B210 and earlier versions,ATH-TL00HC01B210 and earlier versions,ATH-UL00C00B210 and earlier versions,RIO-AL00C00B220 and earlier versions,RIO-CL00C92B220 and earlier versions,RIO-TL00C01B220 and earlier versions,RIO-UL00C00B220 and earlier versions have a path traversal vulnerability. An attacker may exploit it to decompress malicious files into a target path.
Problem types: description: path traversal
Affected products: vendor: Huawei Technologies Co., Ltd.
product: P8 Lite,Mate 7,Mate S,P8,honor 6,honor 7,SHOTX,G8,
Published: 2017-11-22T19:00:00.000Z
CVE-2017-2694 
The AlarmService component in HwVmall with software earlier than 1.5.2.0 versions has no control over calling permissions, allowing any third party to call. An attacker can construct a malicious application to call it. Consequently, alert music will be played suddenly, compromising user experience.
Problem types: description: Improper Permission Control
Affected products: vendor: Huawei Technologies Co., Ltd.
product: HwVmall
Published: 2017-11-22T19:00:00.000Z
CVE-2017-2695 
TIT-AL00C583B211 has a directory traversal vulnerability which allows an attacker to obtain the files in email application.
Problem types: description: Directory Traversal
Affected products: vendor: Huawei Technologies Co., Ltd.
product: TIT-AL00
Published: 2017-11-22T19:00:00.000Z
CVE-2017-2696 
The emerg_data driver in CAM-L21C10B130 and earlier versions, CAM-L21C185B141 and earlier versions has a buffer overflow vulnerability. An attacker with the root privilege of the Android system can tricks a user into installing a malicious application on the smart phone, and send given parameter to smart phone to crash the system or escalate privilege.
Problem types: description: Buffer Overflow
Affected products: vendor: Huawei Technologies Co., Ltd.
product: Y6&#xa2;&#xf2;
Published: 2017-11-22T19:00:00.000Z
CVE-2017-2697 
The goldeneye driver in NMO-L31C432B120 and earlier versions,NEM-L21C432B100 and earlier versions,NEM-L51C432B120 and earlier versions,KNT-AL10C746B160 and earlier versions,VNS-L21C185B142 and earlier versions,CAM-L21C10B130 and earlier versions,CAM-L21C185B141 and earlier versions has buffer overflow vulnerability. An attacker with the root privilege of the Android system can tricks a user into installing a malicious application on the smart phone, and send given parameter to smart phone to crash the system or escalate privilege.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-11-22T19:00:00.000Z
CVE-2017-2698 
The ddr_devfreq driver in versions earlier than GRA-UL00C00B197 has buffer overflow vulnerability. An attacker with the root privilege of the Android system can tricks a user into installing a malicious application on the smart phone, and send given parameter to smart phone to crash the system or escalate privilege.
Problem types: description: Buffer Overflow
Affected products: vendor: Huawei Technologies Co., Ltd.
product: P8
Published: 2017-11-22T19:00:00.000Z
CVE-2017-2699 
The Huawei Themes APP in versions earlier than PLK-UL00C17B385, versions earlier than CRR-L09C432B380, versions earlier than LYO-L21C577B128 has a privilege elevation vulnerability. An attacker could exploit this vulnerability to upload theme packs containing malicious files and trick users into installing the theme packets, resulting in the execution of arbitrary code.
Problem types: description: Privilege Elevation
Affected products: vendor: Huawei Technologies Co., Ltd.
product: Honor 7, Mate S,LYO-L21
Published: 2017-11-22T19:00:00.000Z
CVE-2017-2700 
AC6005 with software V200R006C10, AC6605 with software V200R006C10 have a DoS Vulnerability. An attacker can send malformed packets to the device, which causes the device memory leaks, leading to DoS attacks.
Problem types: description: DoS
Affected products: vendor: Huawei Technologies Co., Ltd.
product: AC6005,AC6605
Published: 2017-11-22T19:00:00.000Z
CVE-2017-2701 
Mate 9 with software MHA-AL00AC00B125 has a denial of service (DoS) vulnerability. An attacker tricks a user into installing a malicious application. Since the system does not verify the broadcasting message from the application, it could be exploited to cause some functions of system unavailable.
Problem types: description: DoS
Affected products: vendor: Huawei Technologies Co., Ltd.
product: Mate 9
Published: 2017-11-22T19:00:00.000Z
CVE-2017-2702 
Phone Finder in versions earlier before MHA-AL00C00B170 can be bypass. An attacker can bypass the Phone Finder by special steps and obtain the owner of the phone.
Problem types: description: Phone Finder Bypass
Affected products: vendor: Huawei Technologies Co., Ltd.
product: Mate 9
Published: 2017-11-22T19:00:00.000Z
CVE-2017-2703 
Phone Finder in versions earlier before MHA-AL00BC00B156,Versions earlier before MHA-CL00BC00B156,Versions earlier before MHA-DL00BC00B156,Versions earlier before MHA-TL00BC00B156,Versions earlier before EVA-AL10C00B373,Versions earlier before EVA-CL10C00B373,Versions earlier before EVA-DL10C00B373,Versions earlier before EVA-TL10C00B373 can be bypass. An attacker can bypass the Phone Finder by special steps and enter the System Setting.
Problem types: description: Phone Finder Bypass
Affected products: vendor: Huawei Technologies Co., Ltd.
product: Mate 9, P9
Published: 2017-11-22T19:00:00.000Z
CVE-2017-2704 
Smarthome 1.0.2.364 and earlier versions,HiAPP 7.3.0.303 and earlier versions,HwParentControl 2.0.0 and earlier versions,HwParentControlParent 5.1.0.12 and earlier versions,Crowdtest 1.5.3 and earlier versions,HiWallet 8.0.0.301 and earlier versions,Huawei Pay 8.0.0.300 and earlier versions,Skytone 8.1.2.300 and earlier versions,HwCloudDrive(EMUI6.0) 8.0.0.307 and earlier versions,HwPhoneFinder(EMUI6.0) 9.3.0.310 and earlier versions,HwPhoneFinder(EMUI5.1) 9.2.2.303 and earlier versions,HiCinema 8.0.2.300 and earlier versions,HuaweiWear 21.0.0.360 and earlier versions,HiHealthApp 3.0.3.300 and earlier versions have an information exposure vulnerability. Encryption keys are stored in the system. The attacker can implement reverse engineering to obtain the encryption keys, causing information exposure.
Problem types: description: Information Exposure
Affected products: vendor: Huawei Technologies Co., Ltd.
product: Smarthome,HiAPP,HwParentControl,HwParentControlParent,Crowdtest,HiWallet,Huawei Pay,Skytone,HwCloudDrive(EMUI6.0),HwPhoneFinder?&#xa1;&#xa7;EMUI6.0??,HwPhoneFinder?&#xa1;&#xa7;EMUI5.1??,HiCinema,HuaweiWear,HiHealthApp,
Published: 2017-11-22T19:00:00.000Z
CVE-2017-2705 
Huawei P9 smartphones with software versions earlier before EVA-AL10C00B365, versions earlier before EVA-AL00C00B365, versions earlier before EVA-CL00C92B365, versions earlier before EVA-DL00C17B365, versions earlier before EVA-TL00C01B365 have a phone activation bypass vulnerability. Successful exploit could allow an unauthenticated attacker to bypass phone activation to settings page of the phone.
Problem types: description: Phone Activation Bypass
Affected products: vendor: Huawei Technologies Co., Ltd.
product: Huawei P9
Published: 2017-11-22T19:00:00.000Z
CVE-2017-2706 
Mate 9 smartphones with software MHA-AL00AC00B125 have a directory traversal vulnerability in Push module. Since the system does not verify the file name during decompression, system directories are traversed. It could be exploited to cause the attacker to replace files and impact the service.
Problem types: description: Directory Traversal
Affected products: vendor: Huawei Technologies Co., Ltd.
product: Mate 9
Published: 2017-11-22T19:00:00.000Z
CVE-2017-2707 
Mate 9 smartphones with software MHA-AL00AC00B125 have a privilege escalation vulnerability in Push module. An attacker tricks a user to save a rich media into message on the smart phone, which could be exploited to cause the attacker to delete message or fake user to send message.
Problem types: description: Privilege Escalation
Affected products: vendor: Huawei Technologies Co., Ltd.
product: Mate 9
Published: 2017-11-22T19:00:00.000Z
CVE-2017-2708 
The 'Find Phone' function in Nice smartphones with software versions earlier before Nice-AL00C00B0135 has an authentication bypass vulnerability. An unauthenticated attacker may wipe and factory reset the phone by special steps. Due to missing authentication of the 'Find Phone' function, an attacker may exploit the vulnerability to bypass the 'Find Phone' function in order to use the phone normally.
Problem types: description: Authentication Bypass
Affected products: vendor: Huawei Technologies Co., Ltd.
product: Nice
Published: 2017-11-22T19:00:00.000Z
CVE-2017-2709 
HiGame with software earlier than 7.3.0 versions, SkyTone with software earlier than 8.1.1 versions have a DoS Vulnerability. An attacker tricks a user into installing a malicious application on the smart phone, the attacker can send malformed packets to the device. Due to the lack of adequate input validation of APPs, which causes the APPs Denial of Service.
Problem types: description: DOS
Affected products: vendor: Huawei Technologies Co., Ltd.
product: HiGame, SkyTone
Published: 2017-11-22T19:00:00.000Z
CVE-2017-2710 
BTV-W09C229B002CUSTC229D005,BTV-W09C233B029, earlier than BTV-W09C100B006CUSTC100D002 versions, earlier than BTV-W09C128B003CUSTC128D002 versions, earlier than BTV-W09C199B002CUSTC199D002 versions, earlier than BTV-W09C209B005CUSTC209D001 versions, earlier than BTV-W09C331B002CUSTC331D001 versions, earlier than CRR-L09C432B390 versions, earlier than CRR-L09C605B355CUSTC605D003 versions have a Factory Reset Protection (FRP) bypass security vulnerability. When re-configuring the mobile phone using the factory reset protection (FRP) function, an attacker can perform some operations to update the Google account. As a result, the FRP function is bypassed.
Problem types: description: FRP Bypass
Affected products: vendor: Huawei Technologies Co., Ltd.
product: Beethoven-W09A, CRR-L09
Published: 2017-11-22T19:00:00.000Z