PT-2019-17516 · Huawei · Huawei P30+3

Publicado 2019-11-29 · Atualizado 2021-07-21 · CVE-2019-5226

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Média

Vetor base

AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Huawei P30 versions prior to ELLE-AL00B 9.1.0.193(C00E190R2P1) Huawei P30 Pro versions prior to VOGUE-AL00A 9.1.0.193(C00E190R2P1) Huawei Mate 20 versions prior to Hima-AL00B 9.1.0.135(C00E133R2P1) Huawei HiSuite versions prior to 9.1.0.305

Description The issue is related to a version downgrade vulnerability. It occurs because the device and HiSuite software do not validate the upgrade package sufficiently, allowing the system of the smartphone to be downgraded to an older version.

Recommendations For Huawei P30 versions prior to ELLE-AL00B 9.1.0.193(C00E190R2P1), update to ELLE-AL00B 9.1.0.193(C00E190R2P1) or later. For Huawei P30 Pro versions prior to VOGUE-AL00A 9.1.0.193(C00E190R2P1), update to VOGUE-AL00A 9.1.0.193(C00E190R2P1) or later. For Huawei Mate 20 versions prior to Hima-AL00B 9.1.0.135(C00E133R2P1), update to Hima-AL00B 9.1.0.135(C00E133R2P1) or later. For Huawei HiSuite versions prior to 9.1.0.305, update to HiSuite 9.1.0.305 or later.

Correção

Origin Validation Error

Enumeração de Fraquezas

CWE-346

Identificadores relacionados

CVE-2019-5226

Produtos afetados

Huawei Hisuite

Huawei Mate 20

Huawei P30

Huawei P30 Pro

Referências · 3

• https://osv.dev/vulnerability/CVE-2019-5226 · Aviso do Fabricante
• https://huawei.com/en/psirt/security-advisories/huawei-sa-20190904-01-smartphone-en · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2019-5226 · Nota de Segurança