Design/Logic Flaw

2019-11-2920:15:00

PRIOn knowledge base

www.prio-n.com

5.6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

21.0%

JSON

The Huawei Share function of P20 phones with versions earlier than Emily-L29C 9.1.0.311 has an improper file management vulnerability. The attacker tricks the victim to perform certain operations on the mobile phone during file transfer. Because the file is not properly processed, successfully exploit may cause some files on the victim’s mobile phone are deleted.

CPENameOperatorVersion
p20_firmwareeq< emilyl29c9.1.0.311c10e2r1p13t8
p20_firmwareeq< emilyl29c9.1.0.311c461e2r1p11t8
p20_firmwareeq< emilyl29c9.1.0.311c605e2r1p12t8
p20_firmwareeq< emilyl29c9.1.0.311c432e7r1p11t8

Name	Operator	Version
p20_firmware	eq	< emilyl29c9.1.0.311c10e2r1p13t8
p20_firmware	eq	< emilyl29c9.1.0.311c461e2r1p11t8
p20_firmware	eq	< emilyl29c9.1.0.311c605e2r1p12t8
p20_firmware	eq	< emilyl29c9.1.0.311c432e7r1p11t8