CVE-2019-5295

3 documents3 sources
Severity
6.4MEDIUM
EPSS
0.0%
top 91.91%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Huawei Honor View 10 FirmwareHuawei Honor V10
Timeline
PublishedJun 6
Latest updateMay 24

Description

Huawei Honor V10 smartphones versions earlier than Berkeley-AL20 9.0.0.125(C00E125R2P14T8) have an authorization bypass vulnerability. Due to improper authorization implementation logic, attackers can bypass certain authorization scopes of smart phones by performing specific operations. This vulnerability can be exploited to perform operations beyond the scope of authorization.

CVSS vector

CVSS:3.0/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:HExploitability: 0.5 | Impact: 5.9

Affected Packages2 packages

▶NVDhuawei/honor_view_10_firmware< berkeley-al20_9.0.0.125\(c00e125r2p14t8\)
▶CVEListV5huawei/honor_v10Versions earlier than Berkeley-AL20 9.0.0.125(C00E125R2P14T8)

🔴Vulnerability Details

2
GHSA
GHSA-m4jg-hxh8-hp87: Huawei Honor V10 smartphones versions earlier than Berkeley-AL20 9↗2022-05-24
▶
CVEList
CVE-2019-5295: Huawei Honor V10 smartphones versions earlier than Berkeley-AL20 9↗2019-06-06
▶
CVE-2019-5295 (MEDIUM CVSS 6.4) | Huawei Honor V10 smartphones versio | cvebase.io