Improper Authentication Vulnerability in Huawei Smartphones
CVE-2019-5233

8.8HIGH

Key Information:

Vendor
Huawei
Status
Taurus-al00b
Vendor
CVE Published:
13 November 2019

Summary

Huawei smartphones running versions earlier than Taurus-AL00B 10.0.0.41(SP2C00E41R3P2) are susceptible to an improper authentication vulnerability. An attacker exploiting this flaw could gain unauthorized access to specific components of the device, potentially compromising user data and device functionality. It is crucial for users to update their smartphones to the latest version to mitigate this risk.

Affected Version(s)

Taurus-AL00B 10.0.0.41(SP2C00E41R3P2)

References

http://www.huawei.com/en/psirt/security-advisories/huawei...
x_refsource_MISC

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.