Lucene search

Huawei TechnologiesHUAWEI-SA-20191211-01-SMARTPHONE

HistoryDec 11, 2019 - 12:00 a.m.

Security Advisory - Information Disclosure Vulnerability in Several Smartphones

2019-12-1100:00:00

Huawei Technologies

www.huawei.com

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

CVSS3

4.6

Attack Vector

PHYSICAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS

0.001

Percentile

30.6%

JSON

There is an information disclosure vulnerability in certain Huawei smartphones. The software does not properly handle certain information of application locked by applock in a rare condition, successful exploit could cause information disclosure. (Vulnerability ID: HWPSIRT-2018-08142)

This vulnerability has been assigned a Common Vulnerabilities and Exposures (CVE) ID: CVE-2019-5264.

Huawei has released software updates to fix this vulnerability. This advisory is available at the following link:

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20191211-01-smartphone-en

Affected configurations

Vulners

Node

huaweialp-al00b_firmwareMatch8.0.0.153

huaweialp-l09_firmwareMatch8.0.0.109

huaweialp-l09_firmwareMatch8.0.0.134

huaweialp-l09_firmwareMatch8.0.0.136

huaweialp-l09_firmwareMatch8.0.0.138

huaweialp-l09_firmwareMatch8.0.0.139

huaweialp-l09_firmwareMatch8.0.0.152

huaweialp-l29_firmwareMatch8.0.0.139

huaweialp-l29_firmwareMatch8.0.0.140

huaweialp-l29_firmwareMatch8.0.0.142

huaweianne-al00_firmwareMatch8.0.0.168

huaweibla-al00b_firmwareMatch8.0.0.153

huaweibla-l09c_firmwareMatch8.0.0.118

huaweibla-l09c_firmwareMatch8.0.0.123

huaweibla-l09c_firmwareMatch8.0.0.132

huaweibla-l09c_firmwareMatch8.0.0.135

huaweibla-l09c_firmwareMatch8.0.0.136

huaweibla-l09c_firmwareMatch8.0.0.137

huaweibla-l09c_firmwareMatch8.0.0.138

huaweibla-l09c_firmwareMatch8.0.0.139

huaweibla-l09c_firmwareMatch8.0.0.143

huaweibla-l09c_firmwareMatch8.0.0.150

huaweibla-l29c_firmwareMatch8.0.0.129

huaweibla-l29c_firmwareMatch8.0.0.137

huaweibla-l29c_firmwareMatch8.0.0.139

huaweibla-l29c_firmwareMatch8.0.0.140

huaweibla-l29c_firmwareMatch8.0.0.143

huaweibla-l29c_firmwareMatch8.0.0.150

huaweilon-l29d_firmwareMatch8.0.0.139

huaweibla-tl00b_firmwareMatch8.0.0.118d

huaweiberkeley-al20_firmwareMatch8.0.0.202

huaweiberkeley-l09_firmwareMatch8.0.0.169

huaweiberkeley-tl10_firmwareMatch8.0.0.202

huaweicameron-al09a_firmwareMatch8.0.0.120a

huaweicameron-al09a_firmwareMatch8.0.0.121

huaweicameron-al09a_firmwareMatch8.0.0.151

huaweibeethoven-w09a_firmwareMatch8.0.0.121

huaweibeethoven-w09a_firmwareMatch8.0.0.131

huaweibeethoven-w09a_firmwareMatch8.0.0.151

huaweifigo-al00a_firmwareMatch8.0.0.176

huaweifigo-l03_firmwareMatch8.0.0.106

huaweifigo-l03_firmwareMatch8.0.0.110

huaweifigo-l03_firmwareMatch8.0.0.113

huaweifigo-l03_firmwareMatch8.0.0.124

huaweifigo-l03_firmwareMatch8.0.0.125

huaweifigo-l03_firmwareMatch8.0.0.130

huaweifigo-l03_firmwareMatch8.0.0.141

huaweifigo-tl10b_firmwareMatch8.0.0.120

huaweifigo-tl10b_firmwareMatch8.0.0.121a

huaweifigo-tl10b_firmwareMatch8.0.0.123

huaweifigo-tl10b_firmwareMatch8.0.0.125a

huaweifigo-tl10b_firmwareMatch8.0.0.126

huaweifigo-tl10b_firmwareMatch8.0.0.128

huaweifigo-tl10b_firmwareMatch8.0.0.130

huaweifigo-tl10b_firmwareMatch8.0.0.135

huaweifigo-l21_firmwareMatch8.0.0.137

huaweifigo-l21_firmwareMatch8.0.0.139

huaweifigo-l23_firmwareMatch8.0.0.142

huaweifigo-l31_firmwareMatch8.0.0.124

huaweifigo-l31_firmwareMatch8.0.0.132

huaweifigo-l31_firmwareMatch8.0.0.135

huaweifigo-l31_firmwareMatch8.0.0.136

huaweifigo-l31_firmwareMatch8.0.0.158

huaweifigo-tl10b_firmwareMatch8.0.0.153

huaweifigo-tl10b_firmwareMatch8.0.0.176

huaweiflorida-l21_firmwareMatch8.0.0.120

huaweiflorida-l03_firmwareMatch8.0.0.123

huaweiflorida-l03_firmwareMatch8.0.0.125

huaweiflorida-l03_firmwareMatch8.0.0.129

huaweiflorida-l21_firmwareMatch8.0.0.124

huaweiflorida-l21_firmwareMatch8.0.0.126

huaweiflorida-l21_firmwareMatch8.0.0.128

huaweiflorida-l22_firmwareMatch8.0.0.127

huaweiflorida-l23_firmwareMatch8.0.0.134

huaweidura-tl00a_firmwareMatch8.0.0.120

huaweiflorida-tl10b_firmwareMatch8.0.0.168

huaweip_smart_firmwareRange<9.1.0.130

huaweip-smart_firmwareRange<9.1.0.119

huaweinova_2_firmwareMatch8.0.0.130

huaweip20_lite_firmwareRange<9.1.0.200

huaweip20_lite_firmwareRange<9.1.0.246

huaweinova_2s_firmwareRange<9.0.1.150

huaweinova_3e_firmwareRange<9.1.0.200

huaweinova_3e_firmwareRange<9.1.0.246

huaweihonor_view_10_firmwareRange<9.0.0.202

huaweileland-al00a_firmwareMatch8.0.0.178

huaweileland-l21a_firmwareMatch8.0.0.131

huaweileland-l21a_firmwareMatch8.0.0.132

huaweileland-l22a_firmwareMatch8.0.0.127

huaweileland-l22a_firmwareMatch8.0.0.188

huaweileland-l22c_firmwareMatch8.0.0.188

huaweileland-l31a_firmwareMatch8.0.0.135

huaweileland-l31a_firmwareMatch8.0.0.136

huaweileland-l42a_firmwareMatch8.0.0.178

huaweileland-l42c_firmwareMatch8.0.0.178

huaweileland-tl10b_firmwareMatch8.0.0.178

huaweilelandp-al00c_firmwareMatch8.0.0.130

huaweilelandp-l22a_firmwareMatch8.0.0.101

huaweilelandp-l22a_firmwareMatch8.0.0.113

huaweilelandp-l22c_firmwareMatch8.0.0.101

huaweilelandp-l22c_firmwareMatch8.0.0.112

huaweilelandp-l22c_firmwareMatch8.0.0.113

huaweilelandp-l22d_firmwareMatch8.0.0.101

huaweilelandp-l22d_firmwareMatch8.0.0.112

huaweilelandp-l22d_firmwareMatch8.0.0.113

huaweimha-al00aMatchmha-l09bc432b198

huaweimha-al00aMatchmha-l29bc636b181

huaweischubert-al09a_firmwareMatch8.0.0.120a

huaweischubert-al09a_firmwareMatch8.0.0.121

huaweischubert-al09a_firmwareMatch8.0.0.131

huaweischubert-al09a_firmwareMatch8.0.0.151

huaweibeethoven-w09a_firmwareMatch8.0.0.101

huaweibeethoven-w09a_firmwareMatch8.0.0.131

huaweibeethoven-w09a_firmwareMatch8.0.0.151

huaweitoronto_firmwareMatchtoronto-l21c10b163custc10d001

huaweitoronto_firmwareMatchtoronto-l21c432b175custc432d001

huaweitoronto_firmwareMatchtoronto-l21c569b130custc569d002

VendorProductVersionCPE
huaweialp-al00b_firmware8.0.0.153cpe:2.3:o:huawei:alp-al00b_firmware:8.0.0.153:*:*:*:*:*:*:*
huaweialp-l09_firmware8.0.0.109cpe:2.3:o:huawei:alp-l09_firmware:8.0.0.109:*:*:*:*:*:*:*
huaweialp-l09_firmware8.0.0.134cpe:2.3:o:huawei:alp-l09_firmware:8.0.0.134:*:*:*:*:*:*:*
huaweialp-l09_firmware8.0.0.136cpe:2.3:o:huawei:alp-l09_firmware:8.0.0.136:*:*:*:*:*:*:*
huaweialp-l09_firmware8.0.0.138cpe:2.3:o:huawei:alp-l09_firmware:8.0.0.138:*:*:*:*:*:*:*
huaweialp-l09_firmware8.0.0.139cpe:2.3:o:huawei:alp-l09_firmware:8.0.0.139:*:*:*:*:*:*:*
huaweialp-l09_firmware8.0.0.152cpe:2.3:o:huawei:alp-l09_firmware:8.0.0.152:*:*:*:*:*:*:*
huaweialp-l29_firmware8.0.0.139cpe:2.3:o:huawei:alp-l29_firmware:8.0.0.139:*:*:*:*:*:*:*
huaweialp-l29_firmware8.0.0.140cpe:2.3:o:huawei:alp-l29_firmware:8.0.0.140:*:*:*:*:*:*:*
huaweialp-l29_firmware8.0.0.142cpe:2.3:o:huawei:alp-l29_firmware:8.0.0.142:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
huawei	alp-al00b_firmware	8.0.0.153	cpe:2.3:o:huawei:alp-al00b_firmware:8.0.0.153:::::::*
huawei	alp-l09_firmware	8.0.0.109	cpe:2.3:o:huawei:alp-l09_firmware:8.0.0.109:::::::*
huawei	alp-l09_firmware	8.0.0.134	cpe:2.3:o:huawei:alp-l09_firmware:8.0.0.134:::::::*
huawei	alp-l09_firmware	8.0.0.136	cpe:2.3:o:huawei:alp-l09_firmware:8.0.0.136:::::::*
huawei	alp-l09_firmware	8.0.0.138	cpe:2.3:o:huawei:alp-l09_firmware:8.0.0.138:::::::*
huawei	alp-l09_firmware	8.0.0.139	cpe:2.3:o:huawei:alp-l09_firmware:8.0.0.139:::::::*
huawei	alp-l09_firmware	8.0.0.152	cpe:2.3:o:huawei:alp-l09_firmware:8.0.0.152:::::::*
huawei	alp-l29_firmware	8.0.0.139	cpe:2.3:o:huawei:alp-l29_firmware:8.0.0.139:::::::*
huawei	alp-l29_firmware	8.0.0.140	cpe:2.3:o:huawei:alp-l29_firmware:8.0.0.140:::::::*
huawei	alp-l29_firmware	8.0.0.142	cpe:2.3:o:huawei:alp-l29_firmware:8.0.0.142:::::::*

Rows per page:

1-10 of 1131

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

CVSS3

4.6

Attack Vector

PHYSICAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS

0.001

Percentile

30.6%

JSON

Related for HUAWEI-SA-20191211-01-SMARTPHONE