PT-2019-4290 · Huawei · Huawei P20
Publicado
2019-11-29
·
Atualizado
2021-07-21
·
CVE-2019-5211
CVSS v2.0
6.1
Média
| Vetor | AV:A/AC:L/Au:N/C:N/I:C/A:N |
Name of the Vulnerable Software and Affected Versions
Huawei P20 versions prior to Emily-L29C 9.1.0.311
Description
The issue is related to improper file management in the Huawei Share function, allowing an attacker to trick a victim into performing certain operations during file transfer. This can lead to the deletion of files on the victim's mobile phone due to insufficient input validation. The vulnerability can be exploited remotely, potentially resulting in the deletion of arbitrary files on the vulnerable device.
Recommendations
For versions prior to Emily-L29C 9.1.0.311, update to version Emily-L29C 9.1.0.311 or later to resolve the issue. As a temporary workaround, consider restricting the use of the Huawei Share function until a patch is applied. Avoid performing suspicious file transfer operations to minimize the risk of exploitation.
Correção
RCE
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Huawei P20