CVE-2016-8776

Опубликовано: 02 апр. 2017

Источник: nvd

CVSS3: 4.6

CVSS2: 2.1

EPSS Низкий

Описание

Huawei P9 phones with software EVA-AL10C00,EVA-CL10C00,EVA-DL10C00,EVA-TL10C00 and P9 Lite phones with software VNS-L21C185 allow attackers to bypass the factory reset protection (FRP) to enter some functional modules without authorization and perform operations to update the Google account.

Ссылки

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20161207-01-smartphone-en
Vendor Advisory
http://www.securityfocus.com/bid/94836
Third Party Advisory
VDB Entry
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20161207-01-smartphone-en
Vendor Advisory
http://www.securityfocus.com/bid/94836
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

Одновременно

Одно из

cpe:2.3:o:huawei:p9_firmware:eva-al10c00:*:*:*:*:*:*:*

cpe:2.3:o:huawei:p9_firmware:eva-cl10c00:*:*:*:*:*:*:*

cpe:2.3:o:huawei:p9_firmware:eva-dl10c00:*:*:*:*:*:*:*

cpe:2.3:o:huawei:p9_firmware:eva-tl10c00:*:*:*:*:*:*:*

cpe:2.3:h:huawei:p9:-:*:*:*:*:*:*:*

Конфигурация 2

Одновременно

cpe:2.3:o:huawei:p9_lite_firmware:vns-l21c185:*:*:*:*:*:*:*

cpe:2.3:h:huawei:p9_lite:-:*:*:*:*:*:*:*

EPSS

Процентиль: 8%

0.0003

Низкий

4.6 Medium

CVSS3

2.1 Low

CVSS2

Дефекты

CWE-285

Связанные уязвимости

GHSA-vc8h-576h-jh5w