MEDIUM · 6.2

CVE-2019-5229

P30 smartphones with versions earlier than ELLE-AL00B 9.1.0.193(C00E190R2P1) have an insufficient verification vulnerability. The system does not verify certain parameters sufficiently, an attacker sh...

Vulnerability Description

P30 smartphones with versions earlier than ELLE-AL00B 9.1.0.193(C00E190R2P1) have an insufficient verification vulnerability. The system does not verify certain parameters sufficiently, an attacker should connect to the phone and gain high privilege to launch the attack, successful exploit could cause malicious code execution.

CVSS Score

6.2

MEDIUM

CVSS:3.1/AV:P/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Attack Vector
PHYSICAL
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
HuaweiP30 Firmware< elle-al00b_9.1.0.193\(c00e190r2p1\)
HuaweiP30-

Related Weaknesses (CWE)

References

FAQ

What is CVE-2019-5229?

CVE-2019-5229 is a vulnerability with a CVSS score of 6.2 (MEDIUM). P30 smartphones with versions earlier than ELLE-AL00B 9.1.0.193(C00E190R2P1) have an insufficient verification vulnerability. The system does not verify certain parameters sufficiently, an attacker sh...

How severe is CVE-2019-5229?

CVE-2019-5229 has been rated MEDIUM with a CVSS base score of 6.2/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2019-5229?

Check the references section above for vendor advisories and patch information. Affected products include: Huawei P30 Firmware, Huawei P30.