CVE-2018-7988: There is a Factory Reset Protection (FRP) bypass vulnerability on several smartphones. The system does not sufficiently verify the permission, an attacker uses…

medium4.6CVSS 3.0

AVPACLPRNUINSUCNIHAN

There is a Factory Reset Protection (FRP) bypass vulnerability on several smartphones. The system does not sufficiently verify the permission, an attacker uses a data cable to connect the smartphone to another smartphone and then perform a series of specific operations. Successful exploit could allow the attacker bypass the FRP protection.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
huawei	mate_9_pro_firmware	< 8.0.0.363\(c00\)	8.0.0.363\(c00\)
huawei	nova_2_plus_firmware	< 8.0.0.350\(c00\)	8.0.0.350\(c00\)