PT-2019-17542 · Huawei · Huawei Y9 2019+1

Publicado 2019-12-13 · Atualizado 2019-12-18 · CVE-2019-5260

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Média

Vetor base

AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Huawei smartphones HUAWEI Y9 2019 and Honor View 20 (affected versions not specified)

Description The issue is related to a denial of service vulnerability. It occurs due to insufficient input validation of a specific value when parsing messages. An attacker can exploit this by sending specially crafted TD-SCDMA messages from a rogue base station to the affected devices. Successful exploitation may cause an infinite loop and result in the device rebooting.

Recommendations For Huawei smartphones HUAWEI Y9 2019 and Honor View 20, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2019-5260

Produtos afetados

Huawei Y9 2019

Honor View 20

Referências · 3

• https://nvd.nist.gov/vuln/detail/CVE-2019-5260 · Nota de Segurança
• https://huawei.com/en/psirt/security-advisories/huawei-sa-20190911-01-mobile-en · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2019-5260 · Aviso do Fabricante