CVE-2019-5252
There is an improper authentication vulnerability in Huawei smartphones (Y9, Honor 8X, Honor 9 Lite, Honor 9i, Y6 Pro). The applock does not perform a sufficient authentication in a rare condition. Successful exploit could allow the attacker to use the application locked by applock in an instant.
- Score
- CVSS 3.1 3.5 Low
- Status
- Modified - psirt@huawei.com
- Published
- 2019-12-14
- Last modified
- 2024-08-04
- Weaknesses
- CWE-287
Affected products
- Enjoy 8 Plus Firmware (Huawei)
- Honor 8x Firmware (Huawei)
- Honor 9 Lite Firmware (Huawei)
- Honor 9i Firmware (Huawei)
- Y6 Pro Firmware (Huawei)
- Y9 Firmware (Huawei)
References
- https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20191204-01-smartphone-en
