5.5
CVE-2019-5279
- EPSS 0.14%
- Veröffentlicht 13.11.2019 14:15:10
- Zuletzt bearbeitet 21.11.2024 04:44:39
- Quelle psirt@huawei.com
- Teams Watchlist Login
- Unerledigt Login
Huawei smart phones Emily-L29C with Versions earlier than 9.1.0.311(C10E2R1P13T8), Versions earlier than 9.1.0.311(C461E2R1P11T8), Versions earlier than 9.1.0.316(C635E2R1P11T8), Versions earlier than 9.1.0.311(C185E2R1P12T8), Versions earlier than 9.1.0.311(C605E2R1P12T8), Versions earlier than 9.1.0.311(C636E7R1P13T8) have an information leakage vulnerability. An attacker tricks the user into installing a malicious application, which can copy specific files to the sdcard, resulting in information leakage.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Huawei ≫ Emily-l29c Firmware Version < 9.1.0.311\(c10e2r1p13t8\)
Huawei ≫ Emily-l29c Firmware Version < 9.1.0.311\(c461e2r1p11t8\)
Huawei ≫ Emily-l29c Firmware Version < 9.1.0.316\(c635e2r1p11t8\)
Huawei ≫ Emily-l29c Firmware Version < 9.1.0.311\(c185e2r1p12t8\)
Huawei ≫ Emily-l29c Firmware Version < 9.1.0.311\(c605e2r1p12t8\)
Huawei ≫ Emily-l29c Firmware Version < 9.1.0.311\(c636e7r1p13t8\)
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.14% | 0.306 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 5.5 | 1.8 | 3.6 |
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
|
| nvd@nist.gov | 4.3 | 8.6 | 2.9 |
AV:N/AC:M/Au:N/C:P/I:N/A:N
|