Login Request a demo
Medium severity · published Jul 10, 2019
CVE-2019-5221
There is a path traversal vulnerability on Huawei Share
6.5
CVSS
0.5%
EPSS
No
On KEV
Description
There is a path traversal vulnerability on Huawei Share. The software does not properly validate the path, an attacker could crafted a file path when transporting file through Huawei Share, successful exploit could allow the attacker to transport a file to arbitrary path on the phone. Affected products: Mate 20 X versions earlier than Ever-L29B 9.1.0.300(C432E3R1P12), versions earlier than Ever-L29B 9.1.0.300(C636E3R2P1), and versions earlier than Ever-L29B 9.1.0.300(C185E3R3P1).
CVSS vector
CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Attack vector
Adjacent
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
None
Integrity
High
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.5% · higher than 40% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
M2
Mate 20 X Firmware · Huawei
before ever-l29b_9.1.0.300\(c636e3r2p1\); before ever-l29b_9.1.0.300\(c432e3r1p12\); before ever-l29b_9.1.0.300\(c185e3r3p1\) · source: NVD
Affected product
M2
Mate 20 X Firmware
Huawei
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2019-5221
CVE.org
https://www.cve.org/CVERecord?id=CVE-2019-5221
Vendor Advisory
https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190703-01-share-en
More from Mate 20 X Firmware
8.8
CVE-2020-0022
In reassemble_and_dispatch of packet_fragmenter.cc, there is possible out of bounds write due to an incorrect bounds calculation
7.8
CVE-2020-9247
There is a buffer overflow vulnerability in several Huawei products
6.8
CVE-2020-9244
HUAWEI Mate 20 versions Versions earlier than 10.1.0.160(C00E160R3P8);HUAWEI Mate 20 Pro versions Versions earlier than 10.1.0.270(C431E7R1P5),Versions earlier than…
5.3
CVE-2019-5303
There are two denial of service vulnerabilities on some Huawei smartphones
5.3
CVE-2019-5302
There are two denial of service vulnerabilities on some Huawei smartphones