PT-2019-17856 · Huawei · V20 Pro L-01J

Hideaki Goto + 2 · Published 2019-02-13 · Updated 2019-02-15 · CVE-2019-5914

Positive Technologies (AI Summary)

CVSS v2.0

5.7

Medium

Base vector

AV:A/AC:M/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions V20 PRO L-01J software version L01J20c V20 PRO L-01J software version L01J20d

Description The issue is related to a NULL pointer exception flaw. An attacker can exploit this flaw to cause the device to crash by setting up a specially crafted access point on the same network range.

Recommendations For V20 PRO L-01J software version L01J20c, at the moment, there is no information about a newer version that contains a fix for this issue. For V20 PRO L-01J software version L01J20d, at the moment, there is no information about a newer version that contains a fix for this issue.

Fix

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

CVE-2019-5914

Affected Products

V20 Pro L-01J

References · 4

• https://osv.dev/vulnerability/CVE-2019-5914 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-5914 · Security Note
• https://nttdocomo.co.jp/support/utilization/product_update/list/l01j/index.html · Vendor Advisory
• http://jvn.jp/en/jp/JVN40439414/index.html · Note