VulnerabilityModified

CVE-2019-5212

There is an improper access control vulnerability in Huawei Share.

MEDIUM 5.5EPSS 0.53%

Does this matter?

Lower severity and a low EPSS score (0.53%). Track it; it rarely justifies an emergency change on its own.

Description

There is an improper access control vulnerability in Huawei Share. The software does not properly restrict access to certain file from certain application. An attacker tricks the user into installing a malicious application then establishing a connect to the attacker through Huawei Share, successful exploit could cause information disclosure.

CVSS 3.1: 5.5 MEDIUMCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
EPSS: 0.53% probability · 43th percentile
CISA KEV: Not listed
Weakness: CWE-732
Affected: huawei/p20 firmware
Source: psirt@huawei.com

References

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20191113-01-share-enVendor Advisory
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20191113-01-share-enVendor Advisory

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.