| Attribute | Details | |-------------------------|-------------------------------------------| | Device | Moto E4 Plus (XT1770, XT1773) | | Base OS | Android 7.1.1 Nougat | | Security Patch Level | Varies (critical for exploit viability) | | FRP Trigger | Google account removal after factory reset without prior removal | | Known Vulnerability | Accessibility menu + Add account activity bypass |
| Component | Weakness | |-----------|----------| | Settings app | The “Paste → Settings” entry point is not protected by FRP state. | | Accessibility Menu | Grants global system overlay permissions that escape FRP sandboxing. | | Add account flow | Generic account manager activity can be launched from Accessibility, bypassing Google’s FRP lock. | | Chrome Help section | Opens a fully functional browser outside the FRP-restricted activity stack. |
| Attribute | Details | |-------------------------|-------------------------------------------| | Device | Moto E4 Plus (XT1770, XT1773) | | Base OS | Android 7.1.1 Nougat | | Security Patch Level | Varies (critical for exploit viability) | | FRP Trigger | Google account removal after factory reset without prior removal | | Known Vulnerability | Accessibility menu + Add account activity bypass |
| Component | Weakness | |-----------|----------| | Settings app | The “Paste → Settings” entry point is not protected by FRP state. | | Accessibility Menu | Grants global system overlay permissions that escape FRP sandboxing. | | Add account flow | Generic account manager activity can be launched from Accessibility, bypassing Google’s FRP lock. | | Chrome Help section | Opens a fully functional browser outside the FRP-restricted activity stack. | frp bypass moto e4 plus