PT-2019-17519 · Huawei · P30

Publicado 2019-11-12 · Atualizado 2019-11-15 · CVE-2019-5229

Positive Technologies (AI Summary)

CVSS v3.1

6.2

Média

Vetor base

AV:P/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions P30 smartphones versions earlier than ELLE-AL00B 9.1.0.193(C00E190R2P1)

Description The issue is related to insufficient verification of certain parameters. An attacker needs to connect to the phone and gain high privilege to launch the attack. Successful exploitation could result in malicious code execution.

Recommendations For versions earlier than ELLE-AL00B 9.1.0.193(C00E190R2P1), update to version ELLE-AL00B 9.1.0.193(C00E190R2P1) or later to resolve the issue.

Correção

Insufficient Verification of Data Authenticity

Enumeração de Fraquezas

CWE-345

Identificadores relacionados

CVE-2019-5229

Produtos afetados

P30

Referências · 3

• https://nvd.nist.gov/vuln/detail/CVE-2019-5229 · Nota de Segurança
• http://huawei.com/en/psirt/security-advisories/huawei-sa-20190925-02-smartphone-en · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2019-5229 · Aviso do Fabricante