Lucene search
Huawei TechnologiesHUAWEI-SA-20190911-01-MOBILEHistoryDec 11, 2019 - 12:00 a.m.
Security Advisory - Denial of Service Vulnerability on Some Huawei Smartphones
2019-12-1100:00:00
Huawei Technologies
www.huawei.com
46
CVSS2
6.1
Attack Vector
ADJACENT_NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:A/AC:L/Au:N/C:N/I:N/A:C
CVSS3
6.5
Attack Vector
ADJACENT
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS
0.001
Percentile
25.7%
There is a denial of service vulnerability on some Huawei smartphones. Due to insufficient input validation of specific value when parsing the messages, an attacker may send specially crafted TD-SCDMA messages from a rogue base station to the affected devices to exploit this vulnerability. Successful exploit may cause an infinite loop and the device abnormal. (Vulnerability ID: HWPSIRT-2019-05096)
This vulnerability has been assigned a Common Vulnerabilities and Exposures (CVE) ID: CVE-2019-5260.
Huawei has released software updates to fix this vulnerability. This advisory is available at the following link:
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190911-01-mobile-en
Affected configurations
Node
huaweialp-al00b_firmwareMatch8.0.0.153
ORhuaweialp-l09_firmwareMatch8.0.0.153
ORhuaweialp-l29_firmwareMatch8.0.0.145
ORhuaweibla-al00b_firmwareMatch8.0.0.153
ORhuaweibla-l09c_firmwareMatch8.0.0.140
ORhuaweibla-l09c_firmwareMatch8.0.0.158
ORhuaweiberkeley-al20_firmwareMatch8.0.0.204
ORhuaweiberkeley-l09_firmwareMatch8.0.0.172
ORhuaweiberkeley-l09_firmwareMatch8.0.0.172
ORhuaweiberkeley-l09_firmwareMatch8.0.0.173
ORhuaweicharlotte-l09c_firmwareMatch8.1.0.156
ORhuaweicharlotte-l09c_firmwareMatch8.1.0.157
ORhuaweicharlotte-l09c_firmwareMatch8.1.0.161
ORhuaweicolumbia-al10b_firmwareRange<9.1.0.333
ORhuaweicolumbia-l29d_firmwareMatch8.1.0.146
ORhuaweicolumbia-l29d_firmwareMatch8.1.0.148
ORhuaweicolumbia-l29d_firmwareMatch8.1.0.151
ORhuaweicolumbia-l29d_firmwareMatch8.1.0.151
ORhuaweicornell-al00a_firmwareMatch8.2.0.151
ORhuaweicornell-l29a_firmwareMatch8.2.0.131
ORhuaweicornell-l29a_firmwareMatch8.2.0.132
ORhuaweicornell-l29a_firmwareMatch8.2.0.132
ORhuaweicornell-l29a_firmwareMatch8.2.0.133
ORhuaweiemily-l09c_firmwareMatch8.1.0.155
ORhuaweiemily-l09c_firmwareMatch8.1.0.156
ORhuaweiemily-l09c_firmwareMatch8.1.0.172
ORhuaweiemily-l29c_firmwareMatch8.1.0.154
ORhuaweiemily-l29c_firmwareMatch8.1.0.156
ORhuaweiemily-l29c_firmwareMatch8.1.0.156
ORhuaweiemily-l29c_firmwareMatch8.1.0.159
ORhuaweiemily-l29c_firmwareMatch8.1.0.166
ORhuaweiever-l29b_firmwareMatch9.0.0.206
ORhuaweiever-l29b_firmwareMatch9.0.0.207
ORhuaweiever-l29b_firmwareMatch9.0.0.208
ORhuaweimate_20_firmwareMatch9.0.0.200
ORhuaweimate_20_firmwareMatch9.0.0.200
ORhuaweimate_20_firmwareRange<9.1.0.131
ORhuaweimate_20_firmwareRange<9.1.0.135
ORhuaweimate_20_pro_firmwareMatch9.0.0.245
ORhuaweimate_20_pro_firmwareMatch9.0.0.263
ORhuaweimate_20_pro_firmwareMatch9.0.0.267
ORhuaweimate_20_pro_firmwareMatch9.0.0.268
ORhuaweimate_20_pro_firmwareMatch9.0.0.269
ORhuaweimate_20_pro_firmwareMatch9.0.0.275
ORhuaweimate_20_pro_firmwareMatch9.0.0.278
ORhuaweimate_20_pro_firmwareRange<9.1.0.310
ORhuaweimate_20_pro_firmwareRange<9.1.0.310
ORhuaweimate_20_pro_firmwareRange<9.1.0.310
ORhuaweimate_20_pro_firmwareRange<9.1.0.310
ORhuaweimate_20_pro_firmwareRange<9.1.0.310
ORhuaweimate_20_pro_firmwareRange<9.1.0.310
ORhuaweimate_20_pro_firmwareRange<9.1.0.310
ORhuaweimate_20_pro_firmwareRange<9.1.0.310
ORhuaweimate_20_pro_firmwareRange<9.1.0.311
ORhuaweimate_20_x_firmwareMatch9.0.0.200
ORhuaweimate_20_x_firmwareRange<9.1.0.135
ORhuaweip_smart_2019_firmwareMatch9.0.1.178
ORhuaweip_smart_2019_firmwareMatch9.0.1.178
ORhuaweip_smart_2019_firmwareMatch9.0.1.181
ORhuaweip_smart_2019_firmwareRange<9.1.0.263
ORhuaweip_smart_2019_firmwareRange<9.1.0.289
ORhuaweip20_firmwareMatch8.1.0.190
ORhuaweip20_firmwareRange<9.1.0.321
ORhuaweip20_pro_firmwareMatch8.1.0.176
ORhuaweip20_pro_firmwareRange<9.1.0.333
ORhuaweip30_firmwareMatch9.1.0.153
ORhuaweip30_firmwareRange<9.1.0.193
ORhuaweip30_pro_firmwareMatch9.1.0.162
ORhuaweip30_pro_firmwareMatch9.1.0.162
ORhuaweip30_pro_firmwareRange<9.1.0.186
ORhuaweip30_pro_firmwareRange<9.1.0.186
ORhuaweiy9_2019_firmwareMatch8.2.0.151
ORhuaweiy9_2019_firmwareMatch8.2.0.152
ORhuaweiy9_2019_firmwareMatch8.2.0.153
ORhuaweiy9_2019_firmwareMatch8.2.0.155
ORhuaweiy9_2019_firmwareMatch8.2.0.158
ORhuaweiy9_2019_firmwareMatch8.2.0.160
ORhuaweiy9_2019_firmwareMatch8.2.0.163
ORhuaweiy9_2019_firmwareRange<9.1.0.220
ORhuaweiy9_2019_firmwareRange<9.1.0.220
ORhuaweiy9_2019_firmwareRange<9.1.0.220
ORhuaweiy9_2019_firmwareRange<9.1.0.220
ORhuaweiy9_2019_firmwareRange<9.1.0.220
ORhuaweiy9_2019_firmwareRange<9.1.0.220
ORhuaweiy9_2019_firmwareRange<9.1.0.220
ORhuaweinova_3_firmwareMatch8.2.0.135
ORhuaweinova_3_firmwareMatch8.2.0.181
ORhuaweinova_3_firmwareRange<9.1.0.331
ORhuaweinova_3_firmwareRange<9.1.0.333
ORhuaweinova_lite_3_firmwareMatch9.0.1.178
ORhuaweinova_lite_3_firmwareRange<9.1.0.305
ORhuaweihonor_10_lite_firmwareMatch9.0.1.177
ORhuaweihonor_10_lite_firmwareMatch9.0.1.181
ORhuaweihonor_10_lite_firmwareRange<9.1.0.262
ORhuaweihonor_10_lite_firmwareRange<9.1.0.262
ORhuaweihonor_10_lite_firmwareRange<9.1.0.262
ORhuaweihonor_10_lite_firmwareRange<9.1.0.262
ORhuaweihonor_8x_firmwareMatch8.2.0.101
ORhuaweihonor_8x_firmwareMatch8.2.0.105
ORhuaweihonor_8x_firmwareMatch8.2.0.130
ORhuaweihonor_8x_firmwareMatch8.2.0.130
ORhuaweihonor_8x_firmwareMatch8.2.0.131
ORhuaweihonor_8x_firmwareRange<9.1.0.217
ORhuaweihonor_8x_firmwareRange<9.1.0.217
ORhuaweihonor_8x_firmwareRange<9.1.0.218
ORhuaweihonor_8x_firmwareRange<9.1.0.221
ORhuaweihonor_8x_firmwareRange<9.1.0.248
ORhuaweihonor_view_20_firmwareMatch9.0.1.150
ORhuaweihonor_view_20_firmwareMatch9.0.1.170
ORhuaweihonor_view_20_firmwareRange<9.1.0.235
ORhuaweihonor_view_20_firmwareRange<9.1.0.238
ORhuaweijackman-l22_firmwareMatch8.2.0.156
ORhuaweivicky-al00c_firmwareRange<9.1.0.210
ORhuaweijohnson-tl00d_firmwareRange<9.1.0.223
ORhuaweijohnson-tl00f_firmwareRange<9.1.0.223
ORhuaweilaya-al00ep_firmwareRange<9.1.0.135
ORhuaweiparis-l21b_firmwareMatch8.2.0.130
ORhuaweiparis-l21meb_firmwareMatch8.2.0.135
ORhuaweiparis-l29b_firmwareMatch8.2.0.137
ORhuaweisydney-al00_firmwareMatch8.2.0.157
ORhuaweisydney-l21_firmwareMatch8.2.0.108
ORhuaweisydney-l21_firmwareMatch8.2.0.137
ORhuaweisydney-l21br_firmwareMatch8.2.0.130
ORhuaweisydney-l22_firmwareMatch8.2.0.138
ORhuaweisydney-l22br_firmwareMatch8.2.0.133
ORhuaweisydneym-al00_firmwareRange<9.1.0.228
ORhuaweisydneym-l01_firmwareMatch8.2.0.132
ORhuaweisydneym-l01_firmwareMatch8.2.0.133
ORhuaweisydneym-l01_firmwareMatch8.2.0.143
ORhuaweisydneym-l03_firmwareMatch8.2.0.135
ORhuaweisydneym-l21_firmwareMatch8.2.0.134
ORhuaweisydneym-l21_firmwareMatch8.2.0.142
ORhuaweisydneym-l22_firmwareMatch8.2.0.132
ORhuaweisydneym-l22_firmwareMatch8.2.0.132
ORhuaweisydneym-l22_firmwareMatch8.2.0.142
ORhuaweisydneym-l23_firmwareMatch8.2.0.134
ORhuaweitony-al00b_firmwareRange<10.0.0.175
ORhuaweiyale-l21a_firmwareMatch9.1.0.107
ORhuaweiyale-l21a_firmwareMatch9.1.0.107
ORhuaweiyale-l21a_firmwareMatch9.1.0.107
ORhuaweiyale-l21a_firmwareMatch9.1.0.107
ORhuaweiyale-l21a_firmwareMatch9.1.0.107
ORhuaweihonor_8x_firmwareMatch8.2.0.175
ORhuaweihonor_magic2_firmwareMatch9.1.0.206
| Vendor | Product | Version | CPE |
|---|---|---|---|
| huawei | alp-al00b_firmware | 8.0.0.153 | cpe:2.3:o:huawei:alp-al00b_firmware:8.0.0.153:*:*:*:*:*:*:* |
| huawei | alp-l09_firmware | 8.0.0.153 | cpe:2.3:o:huawei:alp-l09_firmware:8.0.0.153:*:*:*:*:*:*:* |
| huawei | alp-l29_firmware | 8.0.0.145 | cpe:2.3:o:huawei:alp-l29_firmware:8.0.0.145:*:*:*:*:*:*:* |
| huawei | bla-al00b_firmware | 8.0.0.153 | cpe:2.3:o:huawei:bla-al00b_firmware:8.0.0.153:*:*:*:*:*:*:* |
| huawei | bla-l09c_firmware | 8.0.0.140 | cpe:2.3:o:huawei:bla-l09c_firmware:8.0.0.140:*:*:*:*:*:*:* |
| huawei | bla-l09c_firmware | 8.0.0.158 | cpe:2.3:o:huawei:bla-l09c_firmware:8.0.0.158:*:*:*:*:*:*:* |
| huawei | berkeley-al20_firmware | 8.0.0.204 | cpe:2.3:o:huawei:berkeley-al20_firmware:8.0.0.204:*:*:*:*:*:*:* |
| huawei | berkeley-l09_firmware | 8.0.0.172 | cpe:2.3:o:huawei:berkeley-l09_firmware:8.0.0.172:*:*:*:*:*:*:* |
| huawei | berkeley-l09_firmware | 8.0.0.173 | cpe:2.3:o:huawei:berkeley-l09_firmware:8.0.0.173:*:*:*:*:*:*:* |
| huawei | charlotte-l09c_firmware | 8.1.0.156 | cpe:2.3:o:huawei:charlotte-l09c_firmware:8.1.0.156:*:*:*:*:*:*:* |
Related
nvd
nvd
CVE-2019-5260
2019-12-13 22:15:11
cve
cve
CVE-2019-5260
2019-12-13 22:15:11
prion
prion
Input validation
2019-12-13 22:15:00
cvelist
cvelist
CVE-2019-5260
2019-12-13 21:52:56
CVSS2
6.1
Attack Vector
ADJACENT_NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:A/AC:L/Au:N/C:N/I:N/A:C
CVSS3
6.5
Attack Vector
ADJACENT
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS
0.001
Percentile
25.7%
Related for HUAWEI-SA-20190911-01-MOBILE