The vulnerability of applications for synchronizing HiSuite devices and HwBackup backup functions, related to the lack of protection for service data, allows attackers to gain unauthorized access to information about the user’s Huawei mobile phone backup.

🗓️ 15 Jan 2020 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 4 Views

HiSuite and HwBackup expose unprotected service data, enabling brute-force access to Huawei backups.

Reporter	Title	Published	Views	Family All 9
Circl	CVE-2019-5263	5 Mar 202416:21	–	circl
CVE	CVE-2019-5263	29 Nov 201919:20	–	cve
Cvelist	CVE-2019-5263	29 Nov 201919:20	–	cvelist
EUVD	EUVD-2019-14868	7 Oct 202500:30	–	euvd
Huawei	Security Advisory - Brute Forcing Encrypted Backup Data Vulnerability on Huawei Smartphones	21 Aug 201900:00	–	huawei
NVD	CVE-2019-5263	29 Nov 201920:15	–	nvd
OSV	CVE-2019-5263	29 Nov 201920:15	–	osv
Prion	Information disclosure	29 Nov 201920:15	–	prion
RedhatCVE	CVE-2019-5263	22 May 202508:42	–	redhatcve

Vulners

Node

huawei_technologies_co.,hisuiteRange<9.1.0.306

OR

huawei_technologies_co.,hisuiteRange<9.1.0.312

OR

huawei_technologies_co.,hwbackupRange<9.1.1.308

Source	Link
huawei	www.huawei.com/en/psirt/security-advisories/huawei-sa-20190821-01-backup-en
nvd	www.nvd.nist.gov/vuln/detail/CVE-2019-5263
web	www.web.nvd.nist.gov/view/vuln/detail

15 Jan 2020 00:00Current

5.9Medium risk

Vulners AI Score5.9

CVSS 24

CVSS 35.1

EPSS0.00307

HiSuite vulnerability HwBackup vulnerability Unprotected service data Brute force access Huawei backups