PT-2019-17520 · Huawei · Mate Rs+2

Publicado 2019-11-12 · Atualizado 2019-11-15 · CVE-2019-5230

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Média

Vetor base

AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions P20 Pro versions prior to 9.1.0.321(C00E320R1P1T8) P20 versions prior to 9.1.0.321(C00E320R1P1T8) Mate RS smartphones versions prior to 9.1.0.321(C00E320R1P1T8)

Description The system has an improper validation issue, where it fails to properly validate certain input models. An attacker could trick a user into installing a malicious application, then craft a malformed model. If the exploit is successful, it could allow the attacker to obtain and tamper with certain output data information.

Recommendations For P20 Pro versions prior to 9.1.0.321(C00E320R1P1T8), update to version 9.1.0.321(C00E320R1P1T8) or later. For P20 versions prior to 9.1.0.321(C00E320R1P1T8), update to version 9.1.0.321(C00E320R1P1T8) or later. For Mate RS smartphones versions prior to 9.1.0.321(C00E320R1P1T8), update to version 9.1.0.321(C00E320R1P1T8) or later.

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2019-5230

Produtos afetados

Mate Rs

P20

P20 Pro

Referências · 3

• https://osv.dev/vulnerability/CVE-2019-5230 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2019-5230 · Nota de Segurança
• http://huawei.com/en/psirt/security-advisories/huawei-sa-20190925-03-smartphone-en · Aviso do Fabricante