PT-2019-17519 · Huawei · P30

Published 2019-11-12 · Updated 2019-11-15 · CVE-2019-5229

Positive Technologies (AI Summary)

CVSS v3.1

6.2

Medium

Base vector

AV:P/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions P30 smartphones versions earlier than ELLE-AL00B 9.1.0.193(C00E190R2P1)

Description The issue is related to insufficient verification of certain parameters. An attacker needs to connect to the phone and gain high privilege to launch the attack. Successful exploitation could result in malicious code execution.

Recommendations For versions earlier than ELLE-AL00B 9.1.0.193(C00E190R2P1), update to version ELLE-AL00B 9.1.0.193(C00E190R2P1) or later to resolve the issue.

Fix

Insufficient Verification of Data Authenticity

Weakness Enumeration

CWE-345

Related Identifiers

CVE-2019-5229

Affected Products

P30

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2019-5229 · Security Note
• http://huawei.com/en/psirt/security-advisories/huawei-sa-20190925-02-smartphone-en · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2019-5229 · Vendor Advisory