PT-2019-17547 · Huawei · Huawei Smart Speaker Myna

Published 2019-11-29 · Updated 2020-08-24 · CVE-2019-5271

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Huawei smart speaker Myna (affected versions not specified)

Description The issue is related to an information leak when the smart speaker is connected to the cloud via Wi-Fi, due to incorrect data processing. This allows attackers to read and modify specific speaker configurations through a series of operations.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2019-5271

Affected Products

Huawei Smart Speaker Myna

References · 3

• https://huawei.com/en/psirt/security-advisories/huawei-sa-20191127-01-myna-en · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2019-5271 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-5271 · Security Note