CVE Vulnerabilities

CVE-2019-5229

Insufficient Verification of Data Authenticity

Published: Nov 12, 2019 | Modified: Nov 15, 2019
CVSS 3.x
6.2
MEDIUM
Source:
NVD
CVSS:3.1/AV:P/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS 2.x
4.6 MEDIUM
AV:L/AC:L/Au:N/C:P/I:P/A:P
RedHat/V2
RedHat/V3
Ubuntu

P30 smartphones with versions earlier than ELLE-AL00B 9.1.0.193(C00E190R2P1) have an insufficient verification vulnerability. The system does not verify certain parameters sufficiently, an attacker should connect to the phone and gain high privilege to launch the attack, successful exploit could cause malicious code execution.

Weakness

The product does not sufficiently verify the origin or authenticity of data, in a way that causes it to accept invalid data.

Affected Software

Name Vendor Start Version End Version
P30_firmware Huawei * elle-al00b_9.1.0.193(c00e190r2p1) (excluding)

References