[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fwu80RUih6fVnEXCXnY7e8529T0I6EzizGQAe6BbD0XE":3,"g5a-risk:CVE-2019-5220":149},{"success":4,"data":5,"meta":147},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":40,"epssPercentile":15,"epssTimeSeries":41,"severity":42,"affectedProducts":43,"affectedProductsCount":65,"references":66,"referencesCount":72,"weaknesses":73,"weaknessesCount":72,"isActivelyExploited":82,"cisaInfo":15,"otxData":15,"relatedBlogPosts":83,"seoMetadata":84,"configurations":109,"relatedVendorCves":145,"notableEvents":146},"CVE-2019-5220","What is CVE-2019-5220?","There is a Factory Reset Protection (FRP) bypass vulnerability on several smartphones. The system does not sufficiently verify the permission, an attacker could do a certain operation on certain step of setup wizard. Successful exploit could allow the attacker bypass the FRP protection. Affected products: Mate 20 X, versions earlier than Ever-AL00B 9.0.0.200(C00E200R2P1); Mate 20, versions earlier than Hima-AL00B\u002FHima-TL00B 9.0.0.200(C00E200R2P1); Honor Magic 2, versions earlier than Tony-AL00B\u002FTony-TL00B 9.0.0.182(C00E180R2P2).","There is a Factory Reset Protection (FRP) bypass vulnerability on several smartphones. The system does not sufficiently verify the permission, an attacker co...","2019-07-10T18:15:11.067","2020-08-24T17:37:01.14",4.6,"CVSS:3.0\u002FAV:P\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":16,"CVSSMetricV2":30,"CVSSMetricV40":15},null,[17],{"Source":18,"Type":19,"CVSSData":20,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":21,"VectorString":13,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":24,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":24,"IntegrityImpact":26,"AvailabilityImpact":24,"BaseScore":12,"BaseSeverity":27,"ExploitCodeMaturity":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"TemporalSeverity":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"ModifiedAttackVector":15,"ModifiedAttackComplexity":15,"ModifiedPrivilegesRequired":15,"ModifiedUserInteraction":15,"ModifiedScope":15,"ModifiedConfidentialityImpact":15,"ModifiedIntegrityImpact":15,"ModifiedAvailabilityImpact":15,"EnvironmentalScore":15,"EnvironmentalSeverity":15},"3.0","PHYSICAL","LOW","NONE","UNCHANGED","HIGH","MEDIUM",0.9,3.6,[31],{"Source":18,"Type":19,"CVSSData":32,"BaseSeverity":23,"ExploitabilityScore":38,"ImpactScore":39,"ACInsufInfo":15,"ObtainAllPrivilege":15,"ObtainUserPrivilege":15,"ObtainOtherPrivilege":15,"UserInteractionRequired":15},{"Version":33,"VectorString":34,"AccessVector":35,"AccessComplexity":23,"Authentication":24,"ConfidentialityImpact":24,"IntegrityImpact":36,"AvailabilityImpact":24,"BaseScore":37,"BaseSeverity":15,"Exploitability":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"CollateralDamagePotential":15,"TargetDistribution":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"EnvironmentalScore":15},"2.0","AV:L\u002FAC:L\u002FAu:N\u002FC:N\u002FI:P\u002FA:N","LOCAL","PARTIAL",2.1,3.9,2.9,0.00223,[40,40,40,40,40,40,40],"Medium",[44,49,53,56,59,62],{"vendor":45,"product":46,"version":47,"criteria":48,"vulnerable":4},"huawei","mate_20_x_firmware","*","cpe:2.3:o:huawei:mate_20_x_firmware:*:*:*:*:*:*:*:*",{"vendor":45,"product":50,"version":51,"criteria":52,"vulnerable":4},"mate_20_x","-","cpe:2.3:h:huawei:mate_20_x:-:*:*:*:*:*:*:*",{"vendor":45,"product":54,"version":47,"criteria":55,"vulnerable":4},"mate_20_firmware","cpe:2.3:o:huawei:mate_20_firmware:*:*:*:*:*:*:*:*",{"vendor":45,"product":57,"version":51,"criteria":58,"vulnerable":4},"mate_20","cpe:2.3:h:huawei:mate_20:-:*:*:*:*:*:*:*",{"vendor":45,"product":60,"version":47,"criteria":61,"vulnerable":4},"honor_magic_2_firmware","cpe:2.3:o:huawei:honor_magic_2_firmware:*:*:*:*:*:*:*:*",{"vendor":45,"product":63,"version":51,"criteria":64,"vulnerable":4},"honor_magic_2","cpe:2.3:h:huawei:honor_magic_2:-:*:*:*:*:*:*:*",6,[67],{"url":68,"source":69,"tags":70},"https:\u002F\u002Fwww.huawei.com\u002Fen\u002Fpsirt\u002Fsecurity-advisories\u002Fhuawei-sa-20190626-01-frp-en","Huawei",[71],"Vendor Advisory",1,[74],{"id":75,"name":76,"description":77,"extendedDescription":78,"status":79,"abstraction":80,"structure":81},"CWE-863","Incorrect Authorization","The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check. This allows attackers to bypass intended access restrictions.","Assuming a user with a given identity, authorization is the process of determining whether that user can access a given resource, based on the user's privileges and any permissions or other access-control specifications that apply to the resource.\nWhen access control checks are incorrectly applied, users are able to access data or perform actions that they should not be allowed to perform. This can lead to a wide range of problems, including information exposures, denial of service, and arbitrary code execution.","Incomplete","Class","Simple",false,[],{"title":85,"metaDescription":86,"keywords":87,"canonicalUrl":88,"structuredData":89},"What is CVE-2019-5220? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2019-5220, a medium severity cyber security vulnerability from 2019. There is a Factory Reset Protection (FRP) bypass vulnerabi...","CVE-2019-5220, CVE-2019-5220 vulnerability, CVE-2019-5220 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2019, CVSS score, exploit, patch, remediation, huawei security, mate_20_x_firmware vulnerability, mate_20_x vulnerability, mate_20_firmware vulnerability, mate_20 vulnerability, honor_magic_2_firmware vulnerability","\u002Fwhat-is\u002Fcve-2019-5220",{"@context":90,"@type":91,"headline":85,"description":86,"datePublished":10,"dateModified":11,"author":92,"publisher":96,"about":100,"mainEntityOfPage":104,"articleSection":107,"keywords":108},"https:\u002F\u002Fschema.org","TechArticle",{"@type":93,"name":94,"url":95},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":93,"name":94,"url":95,"logo":97},{"@type":98,"url":99},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":101,"name":6,"description":102,"additionalType":103},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":105,"@id":106},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2019-5220","Cybersecurity","CVE-2019-5220, CVE-2019-5220 vulnerability, CVE-2019-5220 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[110,123,134],{"Operator":111,"Negate":15,"Nodes":112},"AND",[113,119],{"Operator":114,"Negate":15,"CPEMatch":115},"OR",[116],{"Vulnerable":4,"Criteria":48,"MatchCriteriaID":117,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":118,"VersionEndIncluding":15},"6E9B173D-4E18-4147-8900-9F236A01F701","ever-al00b_9.0.0.200\\(c00e200r2p1\\)",{"Operator":114,"Negate":15,"CPEMatch":120},[121],{"Vulnerable":15,"Criteria":52,"MatchCriteriaID":122,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"5FD3779B-F943-4B7E-BF82-AA4A051D02C8",{"Operator":111,"Negate":15,"Nodes":124},[125,130],{"Operator":114,"Negate":15,"CPEMatch":126},[127],{"Vulnerable":4,"Criteria":55,"MatchCriteriaID":128,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":129,"VersionEndIncluding":15},"014B53F4-1EF7-4C2C-BED1-B0D1ECC7BFC7","hima-al00b\\\u002Fhima-tl00b_9.0.0.200\\(c00e200r2p1\\)",{"Operator":114,"Negate":15,"CPEMatch":131},[132],{"Vulnerable":15,"Criteria":58,"MatchCriteriaID":133,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"B5322963-9375-4E4E-8119-895C224003AE",{"Operator":111,"Negate":15,"Nodes":135},[136,141],{"Operator":114,"Negate":15,"CPEMatch":137},[138],{"Vulnerable":4,"Criteria":61,"MatchCriteriaID":139,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":140,"VersionEndIncluding":15},"9385366D-823E-48E6-9A90-63E90D93C178","tony-al00b\\\u002Ftony-tl00b_9.0.0.182\\(c00e180r2p2\\)",{"Operator":114,"Negate":15,"CPEMatch":142},[143],{"Vulnerable":15,"Criteria":64,"MatchCriteriaID":144,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"3F3A0DA8-F39F-4343-856C-4BCDFB874DD2",[],[],{"lastModified":11,"cacheTime":148,"version":33},1792361865176,{"score":150,"band":151,"action":152,"scoredAt":153},16,"Info","Track","2026-10-16T06:46:26.448121+00:00"]