CVE:CVE-2019-19412
CNNVD:CNNVD-202001-783
多款Huawei产品中存在安全漏洞。在进入FRP重新设置手机过程中，攻击者可通过进入Talkback模式，执行一系列操作后安装第三方应用利用该漏洞绕过FRP功能。以下产品及版本受到影响：Huawei ALP-AL00B 9.0.0.181(C00E87R2P20T8)之前版本；ALP-L09 9.0.0.201(C432E4R1P9) 之前版本；ALP-L29 9.0.0.177(C185E2R1P12T8) 之前版本，9.0.0.195(C636E2R1P12) 之前版本；Anne-AL00 8.0.0.168(C00) 之前版本；BLA-AL00B 9.0.0.181(C00E88R2P15T8) 之前版本；BLA-L09C 9.0.0.177(C185E2R1P13T8) 之前版本，9.0.0.206(C432E4R1P11) 之前版本；BLA-L29C 9.0.0.179(C576E2R1P7T8) 之前版本，9.0.0.194(C185E2R1P13) 之前版本，9.0.0.206(C432E4R1P11) 之前版本，9.0.0.210(C635E4R1P13) 之前版本；Berkeley-AL20 9.0.0.156(C00E156R2P14T8) 之前版本；Berkeley-L09 8.0.0.172(C432) 之前版本，8.0.0.173(C636) 之前版本；Emily-L29C 9.0.0.159(C185E2R1P12T8) 之前版本，9.0.0.159(C461E2R1P11T8) 之前版本，9.0.0.160(C432E7R1P11T8) 之前版本，9.0.0.165(C605E2R1P12) 之前版本，9.0.0.168(C636E7R1P13T8) 之前版本，9.0.0.168(C782E3R1P11T8) 之前版本，
 9.0.0.196(C635E2R1P11T8) 之前版本；Figo-L03 9.1.0.130(C605E6R1P5T8) 之前版本；Figo-L21 9.1.0.130(C185E6R1P5T8) 之前版本，9.1.0.130(C635E6R1P5T8) 之前版本；Figo-L23 9.1.0.130(C605E6R1P5T8) 之前版本；Figo-L31 9.1.0.130(C432E8R1P5T8) 之前版本；Florida-L03 9.1.0.121(C605E5R1P1T8) 之前版本；Florida-L21 8.0.0.129(C605) 之前版本，8.0.0.131(C432) 之前版本，8.0.0.132(C185) 之前版本；Florida-L22 8.0.0.132(C636) 之前版本；Florida-L23 8.0.0.144(C605) 之前版本；Huawei P smart 9.1.0.130(C185E6R1P5T8) 之前版本，9.1.0.130(C605E6R1P5T8) 之前版本，9.1.0.124(C636E6R1P5T8) 之前版本；HUAWEI Y7s 9.1.0.124(C636E6R1P5T8) 之前版本；Huawei P20 lite 8.0.0.148(C635) 之前版本，8.0.0.155(C185) 之前版本，8.0.0.155(C605) 之前版本，8.0.0.156(C605) 之前版本，8.0.0.157(C432) 之前版本；Huawei nova 3e 8.0.0.147(C461) 之前版本，8.0.0.148(ZAFC185) 之前版本，8.0.0.160(C185) 之前版本，8.0.0.160(C605) 之前版本，8.0.0.168(C432) 之前版本，8.0.0.172(C636) 之前版本；Huawei P20 lite 8.0.0.147(C461) 之前版本，8.0.0.148(ZAFC185) 之前版本，8.0.0.160(C185) 之前版本，8.0.0.160(C605) 之前版本，8.0.0.168(C432) 之前版本，8.0.0.172(C636) 之前版本；Honor View 10 9.0.0.202(C567E6R1P12T8) 之前版本；Leland-AL00A 8.0.0.182(C00) 之前版本；Leland-L21A 8.0.0.135(C185) 之前版本，9.1.0.118(C636E4R1P1T8) 之前版本；Leland-L22A 9.1.0.118(C636E4R1P1T8) 之前版本；Leland-L22C 9.1.0.118(C636E4R1P1T8) 之前版本；Leland-L31A 8.0.0.139(C432) 之前版本。
solution:Upgrade huawei alp-al00b_firmware to a higher version than 9.0.0.181\(c00e87r2p20t8\,and avoid the version (,9.0.0.181\(c00e87r2p20t8\)); Upgrade huawei alp-l09_firmware to a higher version than 9.0.0.201\(c432e4r1p9\,and avoid the version (,9.0.0.201\(c432e4r1p9\)); Upgrade huawei alp-l29_firmware to a higher version than 9.0.0.177\(c185e2r1p12t8\,9.0.0.195\(c636e2r1p12\,and avoid the version (,9.0.0.177\(c185e2r1p12t8\)),(,9.0.0.195\(c636e2r1p12\)); Upgrade huawei anne-al00_firmware to a higher version than 8.0.0.168\(c00\,and avoid the version (,8.0.0.168\(c00\)); Upgrade huawei bla-al00b_firmware to a higher version than 9.0.0.181\(c00e88r2p15t8\,and avoid the version (,9.0.0.181\(c00e88r2p15t8\)); Upgrade huawei bla-l09c_firmware to a higher version than 9.0.0.177\(c185e2r1p13t8\,9.0.0.206\(c432e4r1p11\,and avoid the version (,9.0.0.177\(c185e2r1p13t8\)),(,9.0.0.206\(c432e4r1p11\)); Upgrade huawei bla-l29c_firmware to a higher version than 9.0.0.179\(c576e2r1p7t8\,9.0.0.194\(c185e2r1p13\,9.0.0.206\(c432e4r1p11\,9.0.0.210\(c635e4r1p13\,and avoid the version (,9.0.0.179\(c576e2r1p7t8\)),(,9.0.0.194\(c185e2r1p13\)),(,9.0.0.206\(c432e4r1p11\)),(,9.0.0.210\(c635e4r1p13\)); Upgrade huawei berkeley-al20_firmware to a higher version than 9.0.0.156\(c00e156r2p14t8\,and avoid the version (,9.0.0.156\(c00e156r2p14t8\)); Upgrade huawei berkeley-l09_firmware to a higher version than 8.0.0.172\(c432\,8.0.0.173\(c636\,and avoid the version (,8.0.0.172\(c432\)),(,8.0.0.173\(c636\)); Upgrade huawei emily-l29c_firmware to a higher version than 9.0.0.159\(c185e2r1p12t8\,9.0.0.159\(c461e2r1p11t8\,9.0.0.160\(c432e7r1p11t8\,9.0.0.165\(c605e2r1p12\,9.0.0.168\(c636e7r1p13t8\,9.0.0.168\(c782e3r1p11t8\,9.0.0.196\(c635e2r1p11t8\,and avoid the version (,9.0.0.159\(c185e2r1p12t8\)),(,9.0.0.159\(c461e2r1p11t8\)),(,9.0.0.160\(c432e7r1p11t8\)),(,9.0.0.165\(c605e2r1p12\)),(,9.0.0.168\(c636e7r1p13t8\)),(,9.0.0.168\(c782e3r1p11t8\)),(,9.0.0.196\(c635e2r1p11t8\)); Upgrade huawei figo-l03_firmware to a higher version than 9.1.0.130\(c605e6r1p5t8\,and avoid the version (,9.1.0.130\(c605e6r1p5t8\)); Upgrade huawei figo-l21_firmware to a higher version than 9.1.0.130\(c185e6r1p5t8\,9.1.0.130\(c635e6r1p5t8\,and avoid the version (,9.1.0.130\(c185e6r1p5t8\)),(,9.1.0.130\(c635e6r1p5t8\)); Upgrade huawei figo-l23_firmware to a higher version than 9.1.0.130\(c605e6r1p5t8\,and avoid the version (,9.1.0.130\(c605e6r1p5t8\)); Upgrade huawei figo-l31_firmware to a higher version than 9.1.0.130\(c432e8r1p5t8\,and avoid the version (,9.1.0.130\(c432e8r1p5t8\)); Upgrade huawei florida-l03_firmware to a higher version than 9.1.0.121\(c605e5r1p1t8\,and avoid the version (,9.1.0.121\(c605e5r1p1t8\)); Upgrade huawei florida-l21_firmware to a higher version than 8.0.0.129\(c605\,8.0.0.131\(c432\,8.0.0.132\(c185\,and avoid the version (,8.0.0.129\(c605\)),(,8.0.0.131\(c432\)),(,8.0.0.132\(c185\)); Upgrade huawei florida-l22_firmware to a higher version than 8.0.0.132\(c636\,and avoid the version (,8.0.0.132\(c636\)); Upgrade huawei florida-l23_firmware to a higher version than 8.0.0.144\(c605\,and avoid the version (,8.0.0.144\(c605\)); Upgrade huawei p_smart_firmware to a higher version than 9.1.0.130\(c185e6r1p5t8\,9.1.0.130\(c605e6r1p5t8\,9.1.0.124\(c636e6r1p5t8\,and avoid the version (,9.1.0.130\(c185e6r1p5t8\)),(,9.1.0.130\(c605e6r1p5t8\)),(,9.1.0.124\(c636e6r1p5t8\)); Upgrade huawei y7s_firmware to a higher version than 9.1.0.124\(c636e6r1p5t8\,and avoid the version (,9.1.0.124\(c636e6r1p5t8\)); Upgrade huawei p20_lite_firmware to a higher version than 8.0.0.148\(c635\,8.0.0.155\(c185\,8.0.0.155\(c605\,8.0.0.156\(c605\,8.0.0.157\(c432\,8.0.0.147\(c461\,8.0.0.148\(zafc185\,8.0.0.160\(c185\,8.0.0.160\(c605\,8.0.0.168\(c432\,8.0.0.172\(c636\,and avoid the version (,8.0.0.148\(c635\)),(,8.0.0.155\(c185\)),(,8.0.0.155\(c605\)),(,8.0.0.156\(c605\)),(,8.0.0.157\(c432\)),(,8.0.0.147\(c461\)),(,8.0.0.148\(zafc185\)),(,8.0.0.160\(c185\)),(,8.0.0.160\(c605\)),(,8.0.0.168\(c432\)),(,8.0.0.172\(c636\)); Upgrade huawei nova_3e_firmware to a higher version than 8.0.0.147\(c461\,8.0.0.148\(zafc185\,8.0.0.160\(c185\,8.0.0.160\(c605\,8.0.0.168\(c432\,8.0.0.172\(c636\,and avoid the version (,8.0.0.147\(c461\)),(,8.0.0.148\(zafc185\)),(,8.0.0.160\(c185\)),(,8.0.0.160\(c605\)),(,8.0.0.168\(c432\)),(,8.0.0.172\(c636\)); Upgrade huawei honor_view_10_firmware to a higher version than 9.0.0.202\(c567e6r1p12t8\,and avoid the version (,9.0.0.202\(c567e6r1p12t8\)); Upgrade huawei leland-al00a_firmware to a higher version than 8.0.0.182\(c00\,and avoid the version (,8.0.0.182\(c00\)); Upgrade huawei leland-l21a_firmware to a higher version than 8.0.0.135\(c185\,9.1.0.118\(c636e4r1p1t8\,and avoid the version (,8.0.0.135\(c185\)),(,9.1.0.118\(c636e4r1p1t8\)); Upgrade huawei leland-l22a_firmware to a higher version than 9.1.0.118\(c636e4r1p1t8\,and avoid the version (,9.1.0.118\(c636e4r1p1t8\)); Upgrade huawei leland-l22c_firmware to a higher version than 9.1.0.118\(c636e4r1p1t8\,and avoid the version (,9.1.0.118\(c636e4r1p1t8\)); Upgrade huawei leland-l31a_firmware to a higher version than 8.0.0.139\(c432\,and avoid the version (,8.0.0.139\(c432\))