6.5

CVE-2019-5260

Huawei smartphones HUAWEI Y9 2019 and Honor View 20 have a denial of service vulnerability. Due to insufficient input validation of specific value when parsing the messages, an attacker may send specially crafted TD-SCDMA messages from a rogue base station to the affected devices to exploit this vulnerability. Successful exploit may cause an infinite loop and the device to reboot.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Huawei ≫ Y9 2019 Firmware Version 8.2.0.160(c185r2p2)
   Huawei ≫ Y9 2019 Version -
Huawei ≫ Y9 2019 Firmware Version 8.2.0.162(c605)
   Huawei ≫ Y9 2019 Version -
Huawei ≫ Y9 2019 Firmware Version 8.2.0.163(c605)
   Huawei ≫ Y9 2019 Version -
Huawei ≫ View 20 Firmware Version 9.0.1.169(c636e1r4p1)
   Huawei ≫ View 20 Version -
Huawei ≫ View 20 Firmware Version 9.0.1.170(c185e2r3p1)
   Huawei ≫ View 20 Version -
Huawei ≫ View 20 Firmware Version 9.0.1.170(c432e1r3p1)
   Huawei ≫ View 20 Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.32% 0.238
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 6.5 2.8 3.6
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
NIST 6.1 6.5 6.9
AV:A/AC:L/Au:N/C:N/I:N/A:C
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190911-01-mobile-en
Vendor Advisory