Information Leak Vulnerability in Huawei Smart Speaker Myna
CVE-2019-5271
5.4MEDIUM
Summary
The Huawei Myna smart speaker has a vulnerability that allows attackers to exploit improper data handling when the device is connected to the cloud via Wi-Fi. This issue enables unauthorized individuals to read and modify specific configurations of the speaker, potentially compromising user data and device settings. It's critical for users to remain vigilant and ensure their devices are appropriately secured to mitigate the risks associated with this vulnerability.
Affected Version(s)
Myna 9.0.1.10(H100SP10C00), 9.0.1.10(H100SP11C00), 9.0.1.10(H100SP12C00), 9.0.1.10(H100SP5C00), 9.0.1.10(H100SP8C00), 9.0.1.9(H100SP6C00),
References
CVSS V3.1
Score:
5.4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved