Improper access control

2019-12-2318:15:00

PRIOn knowledge base

www.prio-n.com

AI Score

7.3

Confidence

High

EPSS

0.002

Percentile

53.8%

JSON

Huawei Share function in P30 9.1.0.193(C00E190R2P1) smartphone has an improper access control vulnerability. The function incorrectly controls certain access messages, attackers can simulate a sender to steal P2P network information. Successful exploit may cause information leakage.

References

www.huawei.com/en/psirt/security-advisories/huawei-sa-20191218-01-share-en