CVE-2017-8152
Last modified
CVE-2017-8152 is a vulnerability of currently unknown severity. Huawei Honor 5S smart phones with software the versions before TAG-TL00C01B173 have a Factory Reset Protection (FRP) bypass security vulnerability due to the improper design. An attacker can access factory reset page without authorization by only dial with special code. EPSS estimates a 0.23% chance of exploitation in the next 30 days.
Description
Huawei Honor 5S smart phones with software the versions before TAG-TL00C01B173 have a Factory Reset Protection (FRP) bypass security vulnerability due to the improper design. An attacker can access factory reset page without authorization by only dial with special code. The attacker can exploit this vulnerability to restore the phone to factory settings.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Huawei | Honor 5s Firmware | < tag-tl00c01b173 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2017-8152?
How severe is CVE-2017-8152?
How do I fix CVE-2017-8152?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2017
- CVE-2017-8146The call module of P10 and P10 Plus smartphones with softwar…
- CVE-2017-8147AC6005 V200R006C10SPC200,AC6605 V200R006C10SPC200,AR1200 wit…
- CVE-2017-8148Audio driver in P9 smartphones with software The versions be…
- CVE-2017-8149The boot loaders of P10 and P10 Plus Huawei mobile phones wi…
- CVE-2017-8150The boot loaders of P10 and P10 Plus Huawei mobile phones wi…
- CVE-2017-8151Huawei Honor 5S smart phones with software the versions befo…
- CVE-2017-8153Huawei VMall (for Android) with the versions before 1.5.8.5 …
- CVE-2017-8154The Themes App Honor 8 Lite Huawei mobile phones with softwa…
- CVE-2017-8155The outdoor unit of Customer Premise Equipment (CPE) product…
- CVE-2017-8156The outdoor unit of Customer Premise Equipment (CPE) product…
- CVE-2017-8157OceanStor 5800 V3 with software V300R002C00 and V300R002C10,…
- CVE-2017-8158FusionCompute V100R005C00 and V100R005C10 have an improper a…
Are you affected by CVE-2017-8152?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST