Huawei P30, Huawei P30 Pro and Honor Princeton-AL10B Conditional Competition Vulnerability

The Huawei P30, among others, is a smartphone from the Chinese company Huawei Huawei. A conditional contention vulnerability exists in the detection module in versions prior to Huawei P30 ELLE-AL00B 9.1.0.193 C00E190R1P21, P30 Pro VOGUE-AL00A 9.1.0.193 C00E190R1P12, and Honor Princeton-AL10B...

Race condition

Certain detection module of P30, P30 Pro, Honor V20 smartphone whith Versions earlier than ELLE-AL00B 9.1.0.193C00E190R1P21, Versions earlier than VOGUE-AL00A 9.1.0.193C00E190R1P12, Versions earlier than Princeton-AL10B 9.1.0.233C00E233R4P3 have a race condition vulnerability. The system does not...

CVE-2019-5228

The CVE-2019-5228 entry describes a race condition in the detection module of Huawei P30, P30 Pro, and Honor V20 devices prior to specific firmware versions (ELLE-AL00B 9.1.0.193, VOGUE-AL00A 9.1.0.193, Princeton-AL10B 9.1.0.233). The vulnerability arises from the system not locking certain funct...

CVE-2019-5228

Certain detection module of P30, P30 Pro, Honor V20 smartphone whith Versions earlier than ELLE-AL00B 9.1.0.193C00E190R1P21, Versions earlier than VOGUE-AL00A 9.1.0.193C00E190R1P12, Versions earlier than Princeton-AL10B 9.1.0.233C00E233R4P3 have a race condition vulnerability. The system does not...

Huawei P30, Mate 20 and P30 Pro Buffer Overflow Vulnerability

The Huawei P30, among others, is a smartphone from the Chinese company Huawei Huawei. A buffer overflow vulnerability exists in versions prior to Huawei P30 ELLE-AL00B 9.1.0.193 C00E190R1P21, Mate 20 Hima-AL00B 9.1.0.135 C00E200R2P1 and P30 Pro VOGUE-AL00A 9.1.0.193 A buffer overflow vulnerabilit...

CVE-2019-5215

There is a man-in-the-middle MITM vulnerability on Huawei P30 smartphones versions before ELE-AL00 9.1.0.162C01E160R1P12/C01E160R2P1, and P30 Pro versions before VOG-AL00 9.1.0.162 C01E160R1P12/C01E160R2P1. When users establish connection and transfer data through Huawei Share, an attacker could...

Design/Logic Flaw

Some Huawei 4G LTE devices, P30 versions before ELE-AL00 9.1.0.162C01E160R1P12/C01E160R2P1 and P30 Pro versions before VOG-AL00 9.1.0.162C01E160R1P12/C01E160R2P1, are exposed to a message replay vulnerability. For the sake of better compatibility, these devices implement a less strict check on th...

Design/Logic Flaw

There is a man-in-the-middle MITM vulnerability on Huawei P30 smartphones versions before ELE-AL00 9.1.0.162C01E160R1P12/C01E160R2P1, and P30 Pro versions before VOG-AL00 9.1.0.162 C01E160R1P12/C01E160R2P1. When users establish connection and transfer data through Huawei Share, an attacker could...

CVE-2019-5307

The CVE-2019-5307 entry covers a message replay vulnerability in Huawei 4G LTE devices (P30 before ELE-AL00 9.1.0.162; P30 Pro before VOG-AL00 9.1.0.162) caused by a lax NAS COUNT check. An attacker can exploit a rogue base station to replay the GUTI reallocation command (and in some cases the Id...

CVE-2019-5215

There is a man-in-the-middle MITM vulnerability on Huawei P30 smartphones versions before ELE-AL00 9.1.0.162C01E160R1P12/C01E160R2P1, and P30 Pro versions before VOG-AL00 9.1.0.162 C01E160R1P12/C01E160R2P1. When users establish connection and transfer data through Huawei Share, an attacker could...

CVE-2019-5215

Summary: CVE-2019-5215 is a MITM vulnerability affecting Huawei Share on Huawei P30/P30 Pro devices (specific builds: ELE-AL00/VOG-AL00 with reported 9.1.0.162 variants). The issue allows an attacker who can observe adjacent-network traffic to sniff, spoof, and tamper Huawei Share data during con...