CVE-2017-2721: Huawei Berlin-l21 Firmware

Medium severity, CVSS 4.6. EPSS: 0.2% chance of exploitation in the next 30 days.

Some Huawei smart phones with software Berlin-L21C10B130,Berlin-L21C185B133,Berlin-L21HNC10B131,Berlin-L21HNC185B140,Berlin-L21HNC432B151,Berlin-L22C636B160,Berlin-L22HNC636B130,Berlin-L22HNC675B150CUSTC675D001,Berlin-L23C605B131,Berlin-L24HNC567B110,FRD-L02C432B120,FRD-L02C635B130,FRD-L02C675B170CUSTC675D001,FRD-L04C567B162,FRD-L04C605B131,FRD-L09C10B130,FRD-L09C185B130,FRD-L09C432B131,FRD-L09C636B130,FRD-L14C567B162,FRD-L19C10B130,FRD-L19C432B131,FRD-L19C636B130 have a factory Reset Protection (FRP) bypass security vulnerability. When re-configuring the mobile phone using the factory reset protection (FRP) function, an attacker can login the configuration flow by Swype Keyboard and can perform some operations to update the Google account. As a result, the FRP function is bypassed.

Affected products

Huawei Berlin-l21 Firmware: version berlin-l21c10b130 only; version berlin-l21c185b133 only
Huawei Berlin-l21hn Firmware: version berlin-l21hnc10b131 only; version berlin-l21hnc185b140 only; version berlin-l21hnc432b151 only
Huawei Berlin-l22 Firmware: version berlin-l22c636b160 only
Huawei Berlin-l22hn Firmware: version berlin-l22hnc636b130 only; version berlin-l22hnc675b150custc675d001 only
Huawei Berlin-l23 Firmware: version berlin-l23c605b131 only
Huawei Berlin-l24hn Firmware: version berlin-l24hnc567b110 only
Huawei Frd-l02 Firmware: version frd-l02c432b120 only; version frd-l02c635b130 only; version frd-l02c675b170custc675d001 only
Huawei Frd-l04 Firmware: version frd-l04c567b162 only; version frd-l04c605b131 only
Huawei Frd-l09 Firmware: version frd-l09c10b130 only; version frd-l09c185b130 only; version frd-l09c432b131 only; version frd-l09c636b130 only
Huawei Frd-l14 Firmware: version frd-l14c567b162 only
Huawei Frd-l19 Firmware: version frd-l19c10b130 only; version frd-l19c432b131 only; version frd-l19c636b130 only

Published 2017-11-22. Last modified 2026-06-17.