MEDIUM🇬🇧 English

CVE-2019-5251

CVSS 5.5v3.1pub. 2019-12-13upd. 2024-11-21

There is a path traversal vulnerability in several Huawei smartphones. The system does not sufficiently validate certain pathnames from the application. An attacker could trick the user into installing, backing up and restoring a malicious application. Successful exploit could cause information disclosure.

oryginał EN
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

  • Huawei Enjoy 7s

    HW
    Huawei
    wszystkie wersje

  • Huawei Enjoy 7s Firmware

    OS
    Huawei
    < 9.1.0.130\(c00e115r2p8t8\)

  • Huawei Honor 20s

    HW
    Huawei
    wszystkie wersje

  • Huawei Honor 20s Firmware

    OS
    Huawei
    < 9.1.1.132\(c00e131r6p1\)

  • Huawei Honor 9i

    HW
    Huawei
    wszystkie wersje

  • Huawei Honor 9i Firmware

    OS
    Huawei
    < 9.1.0.120\(c00e113r1p6t8\)

  • Huawei Honor 9 Lite

    HW
    Huawei
    wszystkie wersje

  • Huawei Honor 9 Lite Firmware

    OS
    Huawei
    < 9.1.0.130\(c00e112r2p10t8\)< 9.1.0.143\(c636e5r1p5t8\)

  • Huawei Honor V10

    HW
    Huawei
    wszystkie wersje

  • Huawei Honor V10 Firmware

    OS
    Huawei
    < 9.1.0.333\(c00e333r2p1t8\)

  • Huawei M6

    HW
    Huawei
    wszystkie wersje

  • Huawei M6 Firmware

    OS
    Huawei
    < 9.1.1.150\(c00e150r1p150\)

  • Huawei Mate 20

    HW
    Huawei
    wszystkie wersje

  • Huawei Mate 20 Firmware

    OS
    Huawei
    < 9.1.0.139\(c00e133r3p1\)

  • Huawei P30

    HW
    Huawei
    wszystkie wersje

  • Huawei P30 Firmware

    OS
    Huawei
    < 9.1.0.226\(c00e220r2p1\)

  • Huawei P30 Pro

    HW
    Huawei
    wszystkie wersje

  • Huawei P30 Pro Firmware

    OS
    Huawei
    < 9.1.0.226\(c00e210r2p1\)
🔵
ZWERYFIKUJ U PRODUCENTA
Brak jednoznacznych danych o patchu. Sprawdź referencje od producenta.
Tagi
Path Traversal
CWE
Referencje

Powiązane podatności

CVE-2021-22331HIGH7.5ten sam produkt

There is a JavaScript injection vulnerability in certain Huawei smartphones. A module does not verify some inp...

CVE-2020-9247HIGH7.8ten sam produkt

There is a buffer overflow vulnerability in several Huawei products. The system does not sufficiently validate...

CVE-2020-9263HIGH7.8ten sam produkt

HUAWEI Mate 30 versions earlier than 10.1.0.150(C00E136R5P3) and HUAWEI P30 version earlier than 10.1.0.160(C0...

CVE-2020-9113HIGH8.0ten sam produkt

HUAWEI Mate 20 versions earlier than 10.0.0.188(C00E74R3P8) have a buffer overflow vulnerability in the Blueto...

CVE-2020-9123HIGH7.8ten sam produkt

HUAWEI P30 Pro versions earlier than 10.1.0.160(C00E160R2P8) and versions earlier than 10.1.0.160(C01E160R2P8)...