PT-2019-17514 · Huawei · Huawei Smartphone

Published 2019-07-17 · Updated 2020-08-24 · CVE-2019-5222

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Huawei smartphones versions earlier than 9.1.0.216(C00E214R2P1)

Description The issue is related to an information disclosure problem in the Secure Input feature of certain Huawei smartphones. It does not properly limit system privileges, which can be exploited if an attacker tricks a user into installing a malicious application. This could result in information disclosure.

Recommendations For versions earlier than 9.1.0.216(C00E214R2P1), update to version 9.1.0.216(C00E214R2P1) or later to resolve the issue.

Fix

Incorrect Permission

Weakness Enumeration

CWE-732

Related Identifiers

CVE-2019-5222

Affected Products

Huawei Smartphone

References · 3

• https://osv.dev/vulnerability/CVE-2019-5222 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-5222 · Security Note
• https://huawei.com/en/psirt/security-advisories/huawei-sa-20190717-01-input-en · Vendor Advisory