PT-2019-17533 · Huawei · Huawei Smartphone

Publicado 2019-12-13 · Atualizado 2019-12-18 · CVE-2019-5251

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Média

Vetor base

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Huawei smartphones (affected versions not specified)

Description The issue is related to a path traversal vulnerability. It occurs because the system does not sufficiently validate certain pathnames from the application. This could allow an attacker to trick the user into installing, backing up, and restoring a malicious application, potentially leading to information disclosure.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Path traversal

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

CVE-2019-5251

Produtos afetados

Huawei Smartphone

Referências · 3

• https://nvd.nist.gov/vuln/detail/CVE-2019-5251 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2019-5251 · Aviso do Fabricante
• https://huawei.com/en/psirt/security-advisories/huawei-sa-20191204-03-smartphone-en · Aviso do Fabricante