Smartphones with software of ELLE-AL00B 9.1.0.109(C00E106R1P21), 9.1.0.113(C00E110R1P21), 9.1.0.125(C00E120R1P21), 9.1.0.135(C00E130R1P21), 9.1.0.153(C00E150R1P21), 9.1.0.155(C00E150R1P21), 9.1.0.162(C00E160R2P1) have an insufficient verification vulnerability. The system does not verify certain parameters sufficiently, an attacker should connect to the phone and gain high privilege to launch the attack. Successful exploit could cause DOS or malicious code execution.
References
| Link | Resource |
|---|---|
| http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190925-01-codeexecution-en | Vendor Advisory |
| http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190925-01-codeexecution-en | Vendor Advisory |
Configurations
Configuration 1 (hide)
| AND |
|
History
21 Nov 2024, 04:44
| Type | Values Removed | Values Added |
|---|---|---|
| References | () http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190925-01-codeexecution-en - Vendor Advisory |
Information
Published : 2019-11-13 00:15
Updated : 2024-11-21 04:44
NVD link : CVE-2019-5246
Mitre link : CVE-2019-5246
CVE.ORG link : CVE-2019-5246
JSON object : View
Products Affected
huawei
- elle-al00b
- elle-al00b_firmware
CWE
CWE-345
Insufficient Verification of Data Authenticity