PT-2019-17534 · Huawei · Honor 8+4

Fan Yuxi · Publicado 2019-12-13 · Atualizado 2019-12-27 · CVE-2019-5252

Positive Technologies (AI Summary)

CVSS v2.0

3.6

Baixa

Vetor base

AV:L/AC:L/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions Huawei smartphones (Y9, Honor 8X, Honor 9 Lite, Honor 9i, Y6 Pro) (affected versions not specified)

Description The issue is related to an improper authentication in the applock feature of the affected devices. In a rare condition, the applock does not perform sufficient authentication, which could allow an attacker to access locked applications instantly.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Authentication

Enumeração de Fraquezas

CWE-287

Identificadores relacionados

CVE-2019-5252

Produtos afetados

Honor 8

Honor 9 Lite

Honor 9

Huawei Y9

Y6 Pro

Referências · 3

• https://osv.dev/vulnerability/CVE-2019-5252 · Aviso do Fabricante
• https://huawei.com/en/psirt/security-advisories/huawei-sa-20191204-01-smartphone-en · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2019-5252 · Nota de Segurança