5.3
CVE-2019-5235
- EPSS 1.05%
- Veröffentlicht 14.12.2019 00:15:10
- Zuletzt bearbeitet 21.11.2024 04:44:34
- Erkennungen
Some Huawei smart phones have a null pointer dereference vulnerability. An attacker crafts specific packets and sends to the affected product to exploit this vulnerability. Successful exploitation may cause the affected phone to be abnormal.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Huawei ≫ Alp-al00b Firmware Version 8.0.0.153(c00)
Huawei ≫ Alp-tl00b Firmware Version 8.0.0.129(sp2c01)
Huawei ≫ Bla-al00b Firmware Version 8.0.0.129(sp2c786)
Huawei ≫ Bla-al00b Firmware Version 8.0.0.153(c00)
Huawei ≫ Bla-tl00b Firmware Version 8.0.0.129(sp2c01)
Huawei ≫ Charlotte-al00a Firmware Version 8.1.0.176(c00)
Huawei ≫ Charlotte-tl00b Firmware Version 8.1.0.176(c01)
Huawei ≫ Columbia-al10b Firmware Version 8.1.0.163(c00)
Huawei ≫ Columbia-al10i Firmware Version 8.1.0.150(c675custc675d2)
Huawei ≫ Columbia-l29d Firmware Version 8.1.0.146(c461)
Huawei ≫ Columbia-l29d Firmware Version 8.1.0.148(c185)
Huawei ≫ Columbia-l29d Firmware Version 8.1.0.151(c10)
Huawei ≫ Columbia-l29d Firmware Version 8.1.0.151(c432)
Huawei ≫ Columbia-tl00d Firmware Version 8.1.0.186(c01gt)
Huawei ≫ Elle-al00b Firmware Version 9.1.0.162(c00e160r2p1)
Huawei ≫ Elle-tl00b Firmware Version 9.1.0.162(c01e160r2p1)
Huawei ≫ Emily-al00a Firmware Version 8.1.0.190(c00)
Huawei ≫ Emily-tl00b Firmware Version 8.1.0.175(c01)
Huawei ≫ Ever-al00b Firmware Version 9.0.0.195(c00e195r2p1)
Huawei ≫ Ever-l29b Firmware Version 9.0.0.206(c185e3r3p1)
Huawei ≫ Ever-l29b Firmware Version 9.0.0.207(c636e3r2p1)
Huawei ≫ Ever-l29b Firmware Version 9.0.0.208(c432e3r1p12)
Huawei ≫ Harry-al00c Firmware Version 9.1.0.206(c00e205r3p1)
Huawei ≫ Harry-al10b Firmware Version -
Huawei ≫ Harry-al10b Firmware Version 9.1.0.206(c00e205r3p1)
Huawei ≫ Harry-tl00c Firmware Version 9.0.1.162(c01e160r2p3)
Huawei ≫ Hima-al00b Firmware Version 9.0.0.200(c00e200r2p1)
Huawei ≫ Jackman-l21 Firmware Version 8.2.0.160(c185)
Huawei ≫ Jackman-l22 Firmware Version 8.2.0.156(c636r2p2)
Huawei ≫ Jackman-l23 Firmware Version 8.2.0.152(c45custc45d1)
Huawei ≫ Jackman-l23 Firmware Version 8.2.0.162(c605)
Huawei ≫ Johnson-al00ic Firmware Version 8.2.0.161(c675custc675d1)
Huawei ≫ Johnson-al10c Firmware Version 8.2.0.165(c00r1p16)
Huawei ≫ Johnson-l21c Firmware Version 8.2.0.130(c461r1p1)
Huawei ≫ Johnson-l21c Firmware Version 8.2.0.131(c10r2p2)
Huawei ≫ Johnson-l21c Firmware Version 8.2.0.136(c432custc432d1)
Huawei ≫ Johnson-l21d Firmware Version 8.2.0.101(c10custc10d1)
Huawei ≫ Johnson-l21d Firmware Version 8.2.0.101(c432custc432d1)
Huawei ≫ Johnson-l21d Firmware Version 8.2.0.131(c55custc55d1)
Huawei ≫ Johnson-l22c Firmware Version 8.2.0.105(c185r1p1)
Huawei ≫ Johnson-l22c Firmware Version 8.2.0.107(c636r2p1)
Huawei ≫ Johnson-l22d Firmware Version 8.2.0.105(c185r2p1)
Huawei ≫ Johnson-l22d Firmware Version 8.2.0.107(c636r2p1)
Huawei ≫ Johnson-l23c Firmware Version 8.2.0.130(c636custc636d2)
Huawei ≫ Johnson-l23c Firmware Version 8.2.0.133(c605custc605d1)
Huawei ≫ Johnson-l42ic Firmware Version 8.2.0.155(c675r2p1)
Huawei ≫ Johnson-l42ie Firmware Version 8.2.0.155(c675r2p1)
Huawei ≫ Johnson-l42if Firmware Version 8.2.0.155(c675r2p1)
Huawei ≫ Johnson-tl00d Firmware Version 8.2.0.100(c541custc541d1)
Huawei ≫ Johnson-tl00d Firmware Version 8.2.0.165(c01r1p16)
Huawei ≫ Johnson-tl00f Firmware Version 8.2.0.100(c541custc541d1)
Huawei ≫ Laya-al00ep Firmware Version 9.0.0.201(c786e200r2p1)
Huawei ≫ Neo-al00d Firmware Version 8.1.0.175(c786)
Huawei ≫ Potter-al00c Firmware Version 9.1.0.208(c00e205r3p1)
Huawei ≫ Potter-al10a Firmware Version 9.1.0.208(c00e205r3p1)
Huawei ≫ Princeton-al10b Firmware Version 9.1.0.211(c00e203r2p2)
Huawei ≫ Princeton-al10d Firmware Version 9.1.0.212(c00e204r2p2)
Huawei ≫ Princeton-al10i Firmware Version 9.0.1.150(c675e9r1p4)
Huawei ≫ Princeton-tl10c Firmware Version 9.1.0.211(c01e203r2p2)
Huawei ≫ Tony-al00b Firmware Version 9.1.0.206(c00e200r2p3)
Huawei ≫ Tony-tl00b Firmware Version 9.1.0.206(c01e200r2p3)
Huawei ≫ Vogue-al00a Firmware Version 9.1.0.162(c00e160r2p1)
Huawei ≫ Vogue-al00a-preload Firmware Version 9.1.0.12(c00r1)
Huawei ≫ Vogue-al10c Firmware Version 9.1.0.162(c00e160r2p1)
Huawei ≫ Vogue-al10c-preload Firmware Version 9.1.0.12(c00r1)
Huawei ≫ Vogue-tl00b Firmware Version 9.1.0.162(c01e160r2p1)
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 1.05% | 0.597 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| NIST | 5.3 | 3.9 | 1.4 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
|
| NIST | 5 | 10 | 2.9 |
AV:N/AC:L/Au:N/C:N/I:N/A:P
|
CWE-476 NULL Pointer Dereference
The product dereferences a pointer that it expects to be valid but is NULL.
https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190821-01-smartphone-en