CVE-2017-8161

CVE-2017-8161 describes a Factory Reset Protection (FRP) bypass vulnerability affecting specific earlier software versions of Huawei EVA-L09 smartphones. An attacker can exploit this by manipulating the Swype login during FRP re-configuration to update the Google account, thereby bypassing the FRP function. Rated as Medium severity (CVSS 4.6), this vulnerability has a physical attack vector and low complexity, potentially leading to a complete bypass of the FRP security measure. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.