CVE-2016-8776

Description

Huawei P9 phones with software EVA-AL10C00,EVA-CL10C00,EVA-DL10C00,EVA-TL10C00 and P9 Lite phones with software VNS-L21C185 allow attackers to bypass the factory reset protection (FRP) to enter some functional modules without authorization and perform operations to update the Google account.

Risk Information

Base Score

4.6

MODERATE

Vector

CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

EPSS Score

Exploitation Probability

0.03

Associated Vulnerability

Vulnerability	OS Platform
Vulnerabilities CVE-2016-8757 ,CVE-2016-8776 are affected in p9_firmware eva-tl10c00	NCM
Vulnerabilities CVE-2016-8757 ,CVE-2016-8776 ,CVE-2017-2691 ,CVE-2017-2713 are affected in p9_firmware eva-dl10c00	NCM
Vulnerabilities CVE-2016-8757 ,CVE-2016-8776 ,CVE-2017-2691 ,CVE-2017-2713 are affected in p9_firmware eva-cl10c00	NCM
Multiple Vulnerabilities affected in p9_firmware eva-al10c00	NCM
Improper Authorization Vulnerability (CVE-2016-8776)	NCM

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234