VulnerabilityModified

CVE-2019-5308

Mate 20 RS smartphones with versions earlier than 9.1.0.135(C786E133R3P1) have an improper authorization vulnerability.

LOW 2.4EPSS 0.21%

Does this matter?

Lower severity and a low EPSS score (0.21%). Track it; it rarely justifies an emergency change on its own.

Description

Mate 20 RS smartphones with versions earlier than 9.1.0.135(C786E133R3P1) have an improper authorization vulnerability. The software does not properly restrict certain operation in ADB mode, successful exploit could allow the attacker to switch to third desktop after a series of operation.

CVSS 3.1: 2.4 LOWCVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
EPSS: 0.21% probability · 11th percentile
CISA KEV: Not listed
Affected: huawei/mate 20 rs firmware
Source: psirt@huawei.com

References

https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20191127-01-smartphone-enVendor Advisory
https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20191127-01-smartphone-enVendor Advisory

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.