Skip to content
TrackCVE
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage
Back

CVE-2019-19412

Huawei smart phones have a Factory Reset Protection (FRP) bypass security vulnerability. When re-configuring the mobile phone using the…

Medium4.6EPSS 0.21%
Published
Updated
Reserved
Assigned by
huawei

Description

Huawei smart phones have a Factory Reset Protection (FRP) bypass security vulnerability. When re-configuring the mobile phone using the factory reset protection (FRP) function, an attacker login the Talkback mode and can perform some operations to install a third-Party application. Affected products can be found in https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200115-01-frp-en.

Timeline

  1. ID reserved

    By huawei

  2. · 6 months later

    Published

  3. · 4 years later

    Record updated

Changes after publication (a new score, a public exploit, EPSS crossing 1, 10 or 50 %, leaving KEV) are kept since November 2026; earlier ones are not known.

Scores

CVSS scores of CVE-2019-19412, by who scored it
Scored byCVSSScoreVector
NVDNVD · Modified3.1Medium4.6CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
EPSS (exploitation in 30 days)
0.21% · top 88% of all CVEs (7 Nov 2026)
Loading the EPSS history…

The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 4.6.

Weakness

  • FRP Bypass

Affected products

  • Huawei · ALP-AL00B

    • affected earlier than 9.0.0.181(C00E87R2P20T8)

  • Huawei · ALP-L09

    • affected earlier than 9.0.0.201(C432E4R1P9)

  • Huawei · ALP-L29

    • affected earlier than 9.0.0.177(C185E2R1P12T8)
    • affected earlier than 9.0.0.195(C636E2R1P12)

  • Huawei · Anne-AL00

    • affected earlier than 8.0.0.168(C00)

  • Huawei · BLA-AL00B

    • affected earlier than 9.0.0.181(C00E88R2P15T8)

  • Huawei · BLA-L09C

    • affected earlier than 9.0.0.177(C185E2R1P13T8)
    • affected earlier than 9.0.0.206(C432E4R1P11)

  • Huawei · BLA-L29C

    • affected earlier than 9.0.0.179(C576E2R1P7T8)
    • affected earlier than 9.0.0.194(C185E2R1P13)
    • affected earlier than 9.0.0.206(C432E4R1P11)
    • affected earlier than 9.0.0.210(C635E4R1P13)

  • Huawei · Berkeley-AL20

    • affected earlier than 9.0.0.156(C00E156R2P14T8)

  • Huawei · Berkeley-L09

    • affected earlier than 8.0.0.172(C432)
    • affected earlier than 8.0.0.173(C636)

  • Huawei · Emily-L29C

    • affected earlier than 9.0.0.159(C185E2R1P12T8)
    • affected earlier than 9.0.0.159(C461E2R1P11T8)
    • affected earlier than 9.0.0.160(C432E7R1P11T8)
    • affected earlier than 9.0.0.165(C605E2R1P12)
    • affected earlier than 9.0.0.168(C636E7R1P13T8)
    • affected earlier than 9.0.0.168(C782E3R1P11T8)
    • affected earlier than 9.0.0.196(C635E2R1P11T8)

  • Huawei · Figo-L03

    • affected earlier than 9.1.0.130(C605E6R1P5T8)

  • Huawei · Figo-L21

    • affected earlier than 9.1.0.130(C185E6R1P5T8)
    • affected earlier than 9.1.0.130(C635E6R1P5T8)

  • Huawei · Figo-L23

    • affected earlier than 9.1.0.130(C605E6R1P5T8)

  • Huawei · Figo-L31

    • affected earlier than 9.1.0.130(C432E8R1P5T8)

  • Huawei · Florida-L03

    • affected earlier than 9.1.0.121(C605E5R1P1T8)

  • Huawei · Florida-L21

    • affected earlier than 8.0.0.129(C605)
    • affected earlier than 8.0.0.131(C432)
    • affected earlier than 8.0.0.132(C185)

  • Huawei · Florida-L22

    • affected earlier than 8.0.0.132(C636)

  • Huawei · Florida-L23

    • affected earlier than 8.0.0.144(C605)

  • Huawei · HUAWEI P smart

    • affected earlier than 9.1.0.130(C185E6R1P5T8)
    • affected earlier than 9.1.0.130(C605E6R1P5T8)

  • Huawei · HUAWEI P smart,HUAWEI Y7s

    • affected earlier than 9.1.0.124(C636E6R1P5T8)

  • Huawei · HUAWEI P20 lite

    • affected earlier than 8.0.0.148(C635)
    • affected earlier than 8.0.0.155(C185)
    • affected earlier than 8.0.0.155(C605)
    • affected earlier than 8.0.0.156(C605)
    • affected earlier than 8.0.0.157(C432)

  • Huawei · HUAWEI nova 3e,HUAWEI P20 lite

    • affected earlier than 8.0.0.147(C461)
    • affected earlier than 8.0.0.148(ZAFC185)
    • affected earlier than 8.0.0.160(C185)
    • affected earlier than 8.0.0.160(C605)
    • affected earlier than 8.0.0.168(C432)
    • affected earlier than 8.0.0.172(C636)

  • Huawei · Honor View 10

    • affected earlier than 9.0.0.202(C567E6R1P12T8)

  • Huawei · Leland-AL00A

    • affected earlier than 8.0.0.182(C00)

  • Huawei · Leland-L21A

    • affected earlier than 8.0.0.135(C185)
    • affected earlier than 9.1.0.118(C636E4R1P1T8)

  • Huawei · Leland-L22A

    • affected earlier than 9.1.0.118(C636E4R1P1T8)

  • Huawei · Leland-L22C

    • affected earlier than 9.1.0.118(C636E4R1P1T8)

  • Huawei · Leland-L31A

    • affected earlier than 8.0.0.139(C432)

References (1)

Sources

The same CVE in the primary databases and aggregators, to check against.

Badge for a README or a ticket

CVE-2019-19412 badge
[![CVE-2019-19412](https://trackcve.app/badge/CVE-2019-19412.svg)](https://trackcve.app/cve/CVE-2019-19412)

Record last updated .