P30 smartphones with versions earlier than ELLE-AL00B 9.1.0.193(C00E190R2P1) have an insufficient verification vulnerability. The system does not verify certain parameters sufficiently, an attacker should connect to the phone and gain high privilege to launch the attack, successful exploit could cause malicious code execution.
References
Link | Resource |
---|---|
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190925-02-smartphone-en | Vendor Advisory |
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190925-02-smartphone-en | Vendor Advisory |
Configurations
Configuration 1 (hide)
AND |
|
History
21 Nov 2024, 04:44
Type | Values Removed | Values Added |
---|---|---|
References | () http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190925-02-smartphone-en - Vendor Advisory |
Information
Published : 2019-11-12 23:15
Updated : 2024-11-21 04:44
NVD link : CVE-2019-5229
Mitre link : CVE-2019-5229
CVE.ORG link : CVE-2019-5229
JSON object : View
Products Affected
huawei
- p30
- p30_firmware
CWE
CWE-345
Insufficient Verification of Data Authenticity