CVE-2019-5216
CVSS2
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:H/Au:N/C:C/I:C/A:C
CVSS3
Attack Vector
LOCAL
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS
Percentile
31.4%
There is a race condition vulnerability on Huawei Honor V10 smartphones versions earlier than Berkeley-AL20 9.0.0.156(C00E156R2P14T8), Honor 10 smartphones versions earlier than Columbia-AL10B 9.0.0.156(C00E156R1P20T8) and Honor Play smartphones versions earlier than Cornell-AL00A 9.0.0.156(C00E156R1P13T8). An attacker tricks the user into installing a malicious application, which makes multiple processes to operate the same variate at the same time. Successful exploit could cause execution of malicious code.
Affected configurations
| Vendor | Product | Version | CPE |
|---|---|---|---|
| huawei | honor_view_10_firmware | * | cpe:2.3:o:huawei:honor_view_10_firmware:*:*:*:*:*:*:*:* |
| huawei | honor_view_10 | - | cpe:2.3:h:huawei:honor_view_10:-:*:*:*:*:*:*:* |
| huawei | honor_10_firmware | * | cpe:2.3:o:huawei:honor_10_firmware:*:*:*:*:*:*:*:* |
| huawei | honor_10 | - | cpe:2.3:h:huawei:honor_10:-:*:*:*:*:*:*:* |
| huawei | honor_play_firmware | * | cpe:2.3:o:huawei:honor_play_firmware:*:*:*:*:*:*:*:* |
| huawei | honor_play | - | cpe:2.3:h:huawei:honor_play:-:*:*:*:*:*:*:* |
Related
CVSS2
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:H/Au:N/C:C/I:C/A:C
CVSS3
Attack Vector
LOCAL
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS
Percentile
31.4%