Information disclosure

2019-11-2920:15:00

PRIOn knowledge base

www.prio-n.com

5.5 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

12.7%

JSON

HiSuite with 9.1.0.305 and earlier versions and 9.1.0.305(MAC) and earlier versions and HwBackup with earlier versions before 9.1.1.308 have a brute forcing encrypted backup data vulnerability. Huawei smartphone user backup information can be obtained by brute forcing the password for encrypting the backup.

CPENameOperatorVersion
hisuitele9.1.0.305
hisuitele9.1.0.305
hwbackuple9.1.1.308

Name	Operator	Version
hisuite	le	9.1.0.305
hisuite	le	9.1.0.305
hwbackup	le	9.1.1.308

References

www.huawei.com/en/psirt/security-advisories/huawei-sa-20190821-01-backup-en