CVE-2019-5231

published 2019-11-13

CVE-2019-5231: P30 smartphones with versions earlier than ELLE-AL00B 9.1.0.186(C00E180R2P1) have an improper authorization vulnerability. The software incorrectly performs an…

medium 4.6 CVSS 3.1

AV P AC L PR N UI N S U C N I H A N

P30 smartphones with versions earlier than ELLE-AL00B 9.1.0.186(C00E180R2P1) have an improper authorization vulnerability. The software incorrectly performs an authorization check when a user attempts to perform certain action. Successful exploit could allow the attacker to update a crafted package.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
huawei	p30_firmware	< elle-al00b_9.1.0.186\(c00e180r2p1\)	elle-al00b_9.1.0.186\(c00e180r2p1\)
huawei	p30_firmware	—	—

CWE-863