PT-2019-17544 · Huawei · Huawei P30

Published 2019-12-23 · Updated 2020-08-24 · CVE-2019-5265

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Huawei P30 version 9.1.0.193(C00E190R2P1)

Description The Huawei Share function has an improper access control issue, where it incorrectly controls certain access messages. This allows attackers to simulate a sender and potentially steal P2P network information, leading to information leakage.

Recommendations For version 9.1.0.193(C00E190R2P1), consider disabling the Huawei Share function until a patch is available to prevent potential information leakage.

Fix

Related Identifiers

CVE-2019-5265

Affected Products

Huawei P30

References · 3

• https://huawei.com/en/psirt/security-advisories/huawei-sa-20191218-01-share-en · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2019-5265 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-5265 · Security Note