CVE-2019-5221

published 2019-07-10

CVE-2019-5221: There is a path traversal vulnerability on Huawei Share. The software does not properly validate the path, an attacker could crafted a file path when…

Priority P4 33 medium 6.5 CVSS 3.0

AV A AC L PR N UI N S U C N I H A N

There is a path traversal vulnerability on Huawei Share. The software does not properly validate the path, an attacker could crafted a file path when transporting file through Huawei Share, successful exploit could allow the attacker to transport a file to arbitrary path on the phone. Affected products: Mate 20 X versions earlier than Ever-L29B 9.1.0.300(C432E3R1P12), versions earlier than Ever-L29B 9.1.0.300(C636E3R2P1), and versions earlier than Ever-L29B 9.1.0.300(C185E3R3P1).

Affected

6 ranges

Vendor	Product	Version range	Fixed in
huawei	mate_20_x	—	—
huawei	mate_20_x	—	—
huawei	mate_20_x	—	—
huawei	mate_20_x_firmware	< ever-l29b_9.1.0.300\(c636e3r2p1\)	ever-l29b_9.1.0.300\(c636e3r2p1\)
huawei	mate_20_x_firmware	< ever-l29b_9.1.0.300\(c432e3r1p12\)	ever-l29b_9.1.0.300\(c432e3r1p12\)
huawei	mate_20_x_firmware	< ever-l29b_9.1.0.300\(c185e3r3p1\)	ever-l29b_9.1.0.300\(c185e3r3p1\)

CVSS provenance

nvd v3.0 6.5 MEDIUM CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

nvd v2.0 3.3 LOW AV:A/AC:L/Au:N/C:N/I:P/A:N

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-22