What is CVE-2017-8152?

CVE-2017-8152 is a medium-severity vulnerability in Huawei Honor 5s, classified under CWE-358. CVSS score: 4.6/10. Published 2017-11-22.

How severe is CVE-2017-8152?

Medium severity. CVSS v3 base score is 4.6 out of 10.

Vulnerability in Huawei Honor 5s

CVE-2017-8152

Huawei Honor 5S smart phones with software the versions before TAG-TL00C01B173 have a Factory Reset Protection (FRP) bypass security vulnerability due to the improper design. An attacker can access factory reset page without authorization by only dial with special code. The attacker can exploit this vulnerability to restore the phone to factory settings.

EPSS: 0.002 (14.3th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 4.6 (Medium). Vector: CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N.

Affected products

Huawei Honor_5s
Huawei Honor_5s_firmware
Huawei Technologies Co., Ltd. Honor 5s — versions The versions before TAG-TL00C01B173

Weakness classification (CWE)

CWE-358

References

psirt@huawei.com (x_refsource_CONFIRM, Vendor Advisory)

Frequently asked questions

What is CVE-2017-8152?: CVE-2017-8152 is a medium-severity vulnerability in Huawei Honor 5s, classified under CWE-358. CVSS score: 4.6/10. Published 2017-11-22.
How severe is CVE-2017-8152?: Medium severity. CVSS v3 base score is 4.6 out of 10.