CVE-2019-5265

Huawei Share function in P30 9.1.0.193(C00E190R2P1) smartphone has an improper access control vulnerability. The function incorrectly controls certain access messages, attackers can simulate a sender to steal P2P network information. Successful exploit may cause information leakage.

Score

CVSS 3.1 7.5 High

Status

Modified - psirt@huawei.com

Published

2019-12-23

Last modified

2024-08-04

Affected products

• P30 (Huawei)
• P30 Firmware (Huawei)

References

• https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20191218-01-share-en