{"id":"CVE-2017-2721","url":"https://www.cyber-defence.io/tools/cve/CVE-2017-2721","generatedAt":"2026-10-28T20:25:40.158Z","title":"Some Huawei smart phones with software…","description":"Some Huawei smart phones with software Berlin-L21C10B130,Berlin-L21C185B133,Berlin-L21HNC10B131,Berlin-L21HNC185B140,Berlin-L21HNC432B151,Berlin-L22C636B160,Berlin-L22HNC636B130,Berlin-L22HNC675B150CUSTC675D001,Berlin-L23C605B131,Berlin-L24HNC567B110,FRD-L02C432B120,FRD-L02C635B130,FRD-L02C675B170CUSTC675D001,FRD-L04C567B162,FRD-L04C605B131,FRD-L09C10B130,FRD-L09C185B130,FRD-L09C432B131,FRD-L09C636B130,FRD-L14C567B162,FRD-L19C10B130,FRD-L19C432B131,FRD-L19C636B130 have a factory Reset Protection (FRP) bypass security vulnerability. When re-configuring the mobile phone using the factory reset protection (FRP) function, an attacker can login the configuration flow by Swype Keyboard and can perform some operations to update the Google account. As a result, the FRP function is bypassed.","published":"2017-11-22T19:29:01.000Z","lastModified":"2026-06-17T01:16:44.000Z","status":"Modified","sourceIdentifier":"psirt@huawei.com","cvss":{"version":"3.0","score":4.6,"severity":"MEDIUM","vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"},"cwe":["CWE-287"],"affected":["huawei/berlin-l21 firmware","huawei/berlin-l21hn firmware","huawei/berlin-l22 firmware","huawei/berlin-l22hn firmware","huawei/berlin-l23 firmware","huawei/berlin-l24hn firmware","huawei/frd-l02 firmware","huawei/frd-l04 firmware","huawei/frd-l09 firmware","huawei/frd-l14 firmware","huawei/frd-l19 firmware"],"epss":{"score":0.00197,"percentile":0.09377,"date":"2026-10-27","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"low","text":"Lower severity and a low EPSS score (0.20%). Track it; it rarely justifies an emergency change on its own."},"changes":[],"references":[{"url":"http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170920-01-frpbypass-en","tags":["Issue Tracking","Vendor Advisory"],"source":"psirt@huawei.com"},{"url":"http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170920-01-frpbypass-en","tags":["Issue Tracking","Vendor Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2017-2721","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}