CVE-2019-5279 — Huawei Emily-l29c Firmware vulnerability

3 documents3 sources

Severity

5.5MEDIUMNVD

EPSS

0.1%

top 65.79%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Huawei Emily-l29c Firmware

Timeline

PublishedNov 13

Latest updateMay 24

Description

Huawei smart phones Emily-L29C with Versions earlier than 9.1.0.311(C10E2R1P13T8), Versions earlier than 9.1.0.311(C461E2R1P11T8), Versions earlier than 9.1.0.316(C635E2R1P11T8), Versions earlier than 9.1.0.311(C185E2R1P12T8), Versions earlier than 9.1.0.311(C605E2R1P12T8), Versions earlier than 9.1.0.311(C636E7R1P13T8) have an information leakage vulnerability. An attacker tricks the user into installing a malicious application, which can copy specific files to the sdcard, resulting in informat…

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:NExploitability: 1.8 | Impact: 3.6

Affected Packages2 packages

▶NVDhuawei/emily-l29c_firmware< 9.1.0.311\(c10e2r1p13t8\)+5

▶CVEListV5huawei/emily-l29c_firmwareVersions earlier than 9.1.0.311(C10E2R1P13T8), Versions earlier than 9.1.0.311(C461E2R1P11T8), Versions earlier than 9.1.0.316(C635E2R1P11T8), Versions earlier than 9.1.0.311(C185E2R1P12T8), Versions earlier than 9.1.0.311(C605E2R1P12T8), Versions earlier than 9.1.0.311(C636E7R1P13T8)

🔴Vulnerability Details

GHSA

GHSA-wxpr-w6c6-j9hv: Huawei smart phones Emily-L29C with Versions earlier than 9↗2022-05-24

▶

CVEList

CVE-2019-5279: Huawei smart phones Emily-L29C with Versions earlier than 9↗2019-11-13

▶