PT-2019-17534 · Huawei · Honor 8+4

Fan Yuxi · Published 2019-12-13 · Updated 2019-12-27 · CVE-2019-5252

Positive Technologies (AI Summary)

CVSS v2.0

3.6

Low

Base vector

AV:L/AC:L/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions Huawei smartphones (Y9, Honor 8X, Honor 9 Lite, Honor 9i, Y6 Pro) (affected versions not specified)

Description The issue is related to an improper authentication in the applock feature of the affected devices. In a rare condition, the applock does not perform sufficient authentication, which could allow an attacker to access locked applications instantly.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2019-5252

Affected Products

Honor 8

Honor 9 Lite

Honor 9

Huawei Y9

Y6 Pro

References · 3

• https://osv.dev/vulnerability/CVE-2019-5252 · Vendor Advisory
• https://huawei.com/en/psirt/security-advisories/huawei-sa-20191204-01-smartphone-en · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-5252 · Security Note