CVE-2019-5213

2019-11-1222:47:47

huawei

www.cve.org

AI Score

3.7

Confidence

High

EPSS

0.001

Percentile

22.9%

JSON

Honor play smartphones with versions earlier than Cornell-AL00A 9.1.0.321(C00E320R1P1T8) have an insufficient authentication vulnerability. The system has a logic judge error under certain scenario. Successful exploit could allow the attacker to modify the alarm clock settings after a serious of uncommon operations without unlock the screen lock.

CNA Affected

[
  {
    "product": "Honor play",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Versions earlier than Cornell-AL00A 9.1.0.321(C00E320R1P1T8)"
      }
    ]
  }
]

References

www.huawei.com/en/psirt/security-advisories/huawei-sa-20191023-01-smartphone-en