PT-2019-17508 · Huawei · Huawei P30+2

Publicado 2019-06-04 · Atualizado 2020-08-24 · CVE-2019-5215

Positive Technologies (AI Summary)

CVSS v3.1

6.8

Média

Vetor base

AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions Huawei P30 smartphones versions prior to ELE-AL00 9.1.0.162(C01E160R1P12/C01E160R2P1) Huawei P30 Pro versions prior to VOG-AL00 9.1.0.162 (C01E160R1P12/C01E160R2P1)

Description The issue allows an attacker to perform a man-in-the-middle (MITM) attack when users establish a connection and transfer data through Huawei Share. This could enable the attacker to sniff, spoof, and intrude the Huawei Share connection, potentially obtaining and tampering with the data.

Recommendations For Huawei P30 smartphones versions prior to ELE-AL00 9.1.0.162(C01E160R1P12/C01E160R2P1), update to version ELE-AL00 9.1.0.162(C01E160R1P12/C01E160R2P1) or later. For Huawei P30 Pro versions prior to VOG-AL00 9.1.0.162 (C01E160R1P12/C01E160R2P1), update to version VOG-AL00 9.1.0.162 (C01E160R1P12/C01E160R2P1) or later. As a temporary workaround, consider disabling Huawei Share until a patch is available.

Correção

Identificadores relacionados

CVE-2019-5215

Produtos afetados

Huawei P30

Huawei P30 Pro

Huawei Share

Referências · 3

• https://osv.dev/vulnerability/CVE-2019-5215 · Aviso do Fabricante
• https://huawei.com/en/psirt/security-advisories/huawei-sa-20190517-01-share-en · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2019-5215 · Nota de Segurança