PT-2019-17508 · Huawei · Huawei P30+2

Published 2019-06-04 · Updated 2020-08-24 · CVE-2019-5215

Positive Technologies (AI Summary)

CVSS v3.1

6.8

Medium

Base vector

AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions Huawei P30 smartphones versions prior to ELE-AL00 9.1.0.162(C01E160R1P12/C01E160R2P1) Huawei P30 Pro versions prior to VOG-AL00 9.1.0.162 (C01E160R1P12/C01E160R2P1)

Description The issue allows an attacker to perform a man-in-the-middle (MITM) attack when users establish a connection and transfer data through Huawei Share. This could enable the attacker to sniff, spoof, and intrude the Huawei Share connection, potentially obtaining and tampering with the data.

Recommendations For Huawei P30 smartphones versions prior to ELE-AL00 9.1.0.162(C01E160R1P12/C01E160R2P1), update to version ELE-AL00 9.1.0.162(C01E160R1P12/C01E160R2P1) or later. For Huawei P30 Pro versions prior to VOG-AL00 9.1.0.162 (C01E160R1P12/C01E160R2P1), update to version VOG-AL00 9.1.0.162 (C01E160R1P12/C01E160R2P1) or later. As a temporary workaround, consider disabling Huawei Share until a patch is available.

Fix

Related Identifiers

CVE-2019-5215

Affected Products

Huawei P30

Huawei P30 Pro

Huawei Share

References · 3

• https://osv.dev/vulnerability/CVE-2019-5215 · Vendor Advisory
• https://huawei.com/en/psirt/security-advisories/huawei-sa-20190517-01-share-en · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-5215 · Security Note