CVE-2019-5230

CWE-20 — Improper Input Validation3 documents3 sources
Severity
5.5MEDIUM
EPSS
0.1%
top 68.33%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
Huawei Mate RS FirmwareHuawei P20 FirmwareHuawei P20 PRO Firmware
Timeline
PublishedNov 13
Latest updateMay 24

Description

P20 Pro, P20, Mate RS smartphones with versions earlier than Charlotte-AL00A 9.1.0.321(C00E320R1P1T8), versions earlier than Emily-AL00A 9.1.0.321(C00E320R1P1T8), versions earlier than NEO-AL00D NEO-AL00 9.1.0.321(C786E320R1P1T8) have an improper validation vulnerability. The system does not perform a properly validation of certain input models, an attacker could trick the user to install a malicious application then craft a malformed model, successful exploit could allow the attacker to get and…

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:NExploitability: 1.8 | Impact: 3.6

Affected Packages3 packages

▶NVDhuawei/mate_rs_firmware< neo-al00d_neo-al00_9.1.0.321\(c786e320r1p1t8\)
▶NVDhuawei/p20_firmware< emily-al00a_9.1.0.321\(c00e320r1p1t8\)
▶NVDhuawei/p20_pro_firmware< charlotte-al00a_9.1.0.321\(c00e320r1p1t8\)

🔴Vulnerability Details

2
GHSA
GHSA-wr92-wj4q-v7v4: P20 Pro, P20, Mate RS smartphones with versions earlier than Charlotte-AL00A 9↗2022-05-24
▶
CVEList
CVE-2019-5230: P20 Pro, P20, Mate RS smartphones with versions earlier than Charlotte-AL00A 9↗2019-11-12
▶