PT-2019-4290 · Huawei · Huawei P20

Published 2019-11-29 · Updated 2021-07-21 · CVE-2019-5211

Positive Technologies (AI Summary)

CVSS v2.0

6.1

Medium

Base vector

AV:A/AC:L/Au:N/C:N/I:C/A:N

Name of the Vulnerable Software and Affected Versions Huawei P20 versions prior to Emily-L29C 9.1.0.311

Description The issue is related to improper file management in the Huawei Share function, allowing an attacker to trick a victim into performing certain operations during file transfer. This can lead to the deletion of files on the victim's mobile phone due to insufficient input validation. The vulnerability can be exploited remotely, potentially resulting in the deletion of arbitrary files on the vulnerable device.

Recommendations For versions prior to Emily-L29C 9.1.0.311, update to version Emily-L29C 9.1.0.311 or later to resolve the issue. As a temporary workaround, consider restricting the use of the Huawei Share function until a patch is applied. Avoid performing suspicious file transfer operations to minimize the risk of exploitation.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

BDU:2020-00005

CVE-2019-5211

Affected Products

Huawei P20

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2019-5211 · Security Note
• https://osv.dev/vulnerability/CVE-2019-5211 · Vendor Advisory
• http://huawei.com/en/psirt/security-advisories/huawei-sa-20191113-02-share-en · Vendor Advisory
• https://bdu.fstec.ru/vul/2020-00005 · Security Note
• https://huawei.com/en/psirt/security-advisories/huawei-sa-20191113-02-share-en · Note