CVE-2019-5231

2019-11-1223:09:17

huawei

www.cve.org

AI Score

4.6

Confidence

High

EPSS

0.001

Percentile

25.0%

JSON

P30 smartphones with versions earlier than ELLE-AL00B 9.1.0.186(C00E180R2P1) have an improper authorization vulnerability. The software incorrectly performs an authorization check when a user attempts to perform certain action. Successful exploit could allow the attacker to update a crafted package.

CNA Affected

[
  {
    "product": "P30",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Versions earlier than ELLE-AL00B 9.1.0.186(C00E180R2P1)"
      }
    ]
  }
]

References

www.huawei.com/en/psirt/security-advisories/huawei-sa-20190930-01-smartphone-en