Factory Reset Protection Bypass in Huawei Smartphones

CVE-2017-8171

Summary

Huawei smartphones running software versions earlier than Vicky-AL00AC00B172 are vulnerable to a Factory Reset Protection (FRP) bypass. This security flaw allows an attacker to exploit the Talkback mode to circumvent Google account verification during the device reconfiguration process. As a consequence, malicious users can regain access to a device after a factory reset, undermining the device's security measures. Users of affected Huawei models are encouraged to update their software to the latest versions to mitigate this vulnerability.

References