5.5

CVE-2019-5230

P20 Pro, P20, Mate RS smartphones with versions earlier than Charlotte-AL00A 9.1.0.321(C00E320R1P1T8), versions earlier than Emily-AL00A 9.1.0.321(C00E320R1P1T8), versions earlier than NEO-AL00D NEO-AL00 9.1.0.321(C786E320R1P1T8) have an improper validation vulnerability. The system does not perform a properly validation of certain input models, an attacker could trick the user to install a malicious application then craft a malformed model, successful exploit could allow the attacker to get and tamper certain output data information.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Huawei ≫ P20 Pro Firmware Version < charlotte-al00a_9.1.0.321\(c00e320r1p1t8\)
   Huawei ≫ P20 Pro Version -
Huawei ≫ P20 Firmware Version < emily-al00a_9.1.0.321\(c00e320r1p1t8\)
   Huawei ≫ P20 Version -
Huawei ≫ Mate Rs Firmware Version < neo-al00d_neo-al00_9.1.0.321\(c786e320r1p1t8\)
   Huawei ≫ Mate Rs Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.46% 0.365
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 5.5 1.8 3.6
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
NIST 4.3 8.6 2.9
AV:N/AC:M/Au:N/C:N/I:P/A:N
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190925-03-smartphone-en
Vendor Advisory