Vulnerability in Huawei Beethoven-W09a
CVE-2017-2710
BTV-W09C229B002CUSTC229D005,BTV-W09C233B029, earlier than BTV-W09C100B006CUSTC100D002 versions, earlier than BTV-W09C128B003CUSTC128D002 versions, earlier than BTV-W09C199B002CUSTC199D002 versions, earlier than BTV-W09C209B005CUSTC209D001 versions, earlier than BTV-W09C331B002CUSTC331D001 versions, earlier than CRR-L09C432B390 versions, earlier than CRR-L09C605B355CUSTC605D003 versions have a Factory Reset Protection (FRP) bypass security vulnerability. When re-configuring the mobile phone using the factory reset protection (FRP) function, an attacker can perform some operations to update the Google account. As a result, the FRP function is bypassed.
EPSS: 0.002 (15.2th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 4.6 (Medium). Vector: CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N.
Affected products
- Huawei Beethoven-w09a
- Huawei Beethoven-w09a_firmware — versions btv-w09c229b002custc229d005, btv-w09c233b029
- Huawei Crr-l09
- Huawei Crr-l09_firmware
- Huawei Technologies Co., Ltd. Beethoven-w09a, Crr-l09 — versions BTV-W09C229B002CUSTC229D005,BTV-W09C233B029,Earlier than BTV-W09C100B006CUSTC100D002 versions,Earlier than BTV-W09C128B003CUSTC128D002 versions,Earlier than BTV-W09C199B002CUSTC199D002 versions,Earlier than BTV-W09C209B005CUSTC209D001 versions,Earlier than BTV-W09C331B002CUSTC331D001 versions,Earlier than CRR-L09C432B390 versions,Earlier than CRR-L09C605B355CUSTC605D003 versions,
References
- psirt@huawei.com (x_refsource_CONFIRM, Issue Tracking, Vendor Advisory)
- psirt@huawei.com (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_BID)
Frequently asked questions
- What is CVE-2017-2710?
- CVE-2017-2710 is a medium-severity vulnerability in Huawei Beethoven-W09a. CVSS score: 4.6/10. Published 2017-11-22.
- How severe is CVE-2017-2710?
- Medium severity. CVSS v3 base score is 4.6 out of 10.