CVE-2019-5220

There is a Factory Reset Protection (FRP) bypass vulnerability on several smartphones. The system does not sufficiently verify the permission, an attacker could do a certain operation on certain step of setup wizard. Successful exploit could allow the attacker bypass the FRP protection. Affected products: Mate 20 X, versions earlier than Ever-AL00B 9.0.0.200(C00E200R2P1); Mate 20, versions earlier than Hima-AL00B/Hima-TL00B 9.0.0.200(C00E200R2P1); Honor Magic 2, versions earlier than Tony-AL00B/Tony-TL00B 9.0.0.182(C00E180R2P2).

• CWE-863

• https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190626-01-frp-enVendor Advisory
• https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190626-01-frp-enVendor Advisory

Published

Jul 10, 2019

Last Modified

Jun 17, 2026

Status

Modified

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-5214There is a use after free vulnerability on certain driver co…
• CVE-2019-5215There is a man-in-the-middle (MITM) vulnerability on Huawei …
• CVE-2019-5216There is a race condition vulnerability on Huawei Honor V10 …
• CVE-2019-5217There is an information disclosure vulnerability on Mate 9 P…
• CVE-2019-5218There is an insufficient authentication vulnerability in Hua…8.8
• CVE-2019-5219There is a double free vulnerability on certain drivers of H…
• CVE-2019-5221There is a path traversal vulnerability on Huawei Share. The…
• CVE-2019-5222There is an information disclosure vulnerability on Secure I…
• CVE-2019-5223PCManager 9.1.3.1 has an improper authentication vulnerabili…
• CVE-2019-5224P30 smartphones with versions earlier than ELLE-AL00B 9.1.0.…5.5
• CVE-2019-5225P30, Mate 20, P30 Pro smartphones with software of versions …7.8
• CVE-2019-5226P30, P30 Pro, Mate 20 smartphones with software of versions …5.5