5.5
CVE-2019-5230
- EPSS 0.13%
- Published 13.11.2019 00:15:11
- Last modified 21.11.2024 04:44:34
- Source psirt@huawei.com
- Teams watchlist Login
- Open Login
P20 Pro, P20, Mate RS smartphones with versions earlier than Charlotte-AL00A 9.1.0.321(C00E320R1P1T8), versions earlier than Emily-AL00A 9.1.0.321(C00E320R1P1T8), versions earlier than NEO-AL00D NEO-AL00 9.1.0.321(C786E320R1P1T8) have an improper validation vulnerability. The system does not perform a properly validation of certain input models, an attacker could trick the user to install a malicious application then craft a malformed model, successful exploit could allow the attacker to get and tamper certain output data information.
Data is provided by the National Vulnerability Database (NVD)
Huawei ≫ P20 Pro Firmware Version < charlotte-al00a_9.1.0.321\(c00e320r1p1t8\)
Huawei ≫ P20 Firmware Version < emily-al00a_9.1.0.321\(c00e320r1p1t8\)
Huawei ≫ Mate Rs Firmware Version < neo-al00d_neo-al00_9.1.0.321\(c786e320r1p1t8\)
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Type | Source | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.13% | 0.284 |
| Source | Base Score | Exploit Score | Impact Score | Vector string |
|---|---|---|---|---|
| nvd@nist.gov | 5.5 | 1.8 | 3.6 |
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
|
| nvd@nist.gov | 4.3 | 8.6 | 2.9 |
AV:N/AC:M/Au:N/C:N/I:P/A:N
|
CWE-20 Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.