Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2019-5287 State: PUBLISHED Published: 2019-11-13T14:43:42 Last Updated: 2024-08-04T19:54:51.844Z Vendors: n/a Products: P30 Problem Types: Integer overflow Description: P30 smart phones with versions earlier than ELLE-AL00B 9.1.0.193(C00E190R2P1) have an integer overflow vulnerability due to insufficient check on specific parameters. An attacker tricks the user into installing a malicious application, obtains the root permission and constructs specific parameters to the camera program to exploit this vulnerability. Successful exploit could cause the program to break down or allow for arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References: - http:/
reak down or allow for arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190925-01-smartphone-en
CVE ID: CVE-2019-5288 State: PUBLISHED Published: 2019-11-13T14:45:56 Last Updated: 2024-08-04T19:54:52.398Z Vendors: n/a Products: P30 Problem Types: Integer overflow Description: P30 smart phones with versions earlier than ELLE-AL00B 9.1.0.193(C00E190R2P1) have an integer overflow vulnerability due to insufficient check on specific parameters. An attacker tricks the user into installing a malicious application, obtains the root permission and constructs specific parameters to the camera program to exploit this vulnerability. Successful exploit could cause the program to break down or allow for arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References: - http:/
CVE ID: CVE-2019-5289 State: PUBLISHED Published: 2019-11-13T16:03:23 Last Updated: 2024-08-04T19:54:52.396Z Vendors: n/a Products: ManageOne Problem Types: Out-of-bounds Read Description: Gauss100 OLTP database in ManageOne with versions of 6.5.0 have an out-of-bounds read vulnerability due to the insufficient checks of the specific packet length. Attackers can construct invalid packets to attack the active and standby communication channels. Successful exploit of this vulnerability could allow the attacker to crash the database on the standby node. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190925-01-datab
s: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190925-01-database-en
CVE ID: CVE-2019-5290 State: PUBLISHED Published: 2019-12-13T14:47:00 Last Updated: 2024-08-04T19:54:52.394Z Vendors: n/a Products: S5700;S6700 Problem Types: DoS Description: Huawei S5700 and S6700 have a DoS security vulnerability. Attackers with certain permissions perform specific operations on affected devices. Because the pointer in the program is not processed properly, the vulnerability can be exploited to cause the device to be abnormal. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20191204-02-dos-en
CVE ID: CVE-2019-5291 State: PUBLISHED Published: 2019-12-13T14:35:50 Last Updated: 2024-08-04T19:54:52.966Z Vendors: n/a Products: AR120-S;AR1200;AR1200-S;AR150;AR150-S;AR160;AR200;AR200-S;AR2200;AR2200-S;AR3200;AR3600;CloudEngine 12800;NetEngine16EX;S6700;SRG1300;SRG2300;SRG3300 Problem Types: Insufficient Verification Description: Some Huawei products have an insufficient verification of data authenticity vulnerability. A remote, unauthenticated attacker has to intercept specific packets between two devices, modify the packets, and send the modified packets to the peer device. Due to insufficient verification of some fields in the packets, an attacker may exploit the vulnerability to caus
evice. Due to insufficient verification of some fields in the packets, an attacker may exploit the vulnerability to cause the target device to be abnormal. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20191204-01-validation-en
CVE ID: CVE-2019-5292 State: PUBLISHED Published: 2019-11-13T15:52:53 Last Updated: 2024-08-04T19:54:53.170Z Vendors: n/a Products: Honor 10 Lite, Honor 8A, Huawei Y6 Problem Types: Information Leak Description: Honor 10 Lite, Honor 8A, Huawei Y6 mobile phones with the versions before 9.1.0.217(C00E215R3P1), the versions before 9.1.0.205(C00E97R1P9), the versions before 9.1.0.205(C00E97R2P2) have an information leak vulnerability. Due to improper function error records of some module, an attacker with the access permission may exploit the vulnerability to obtain some information. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisori
ation. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20191030-01-phone-en
CVE ID: CVE-2019-5293 State: PUBLISHED Published: 2019-11-13T16:19:36 Last Updated: 2024-08-04T19:54:52.378Z Vendors: n/a Products: AR120-S, AR1200, AR1200-S, AR150, AR150-S, AR160, AR200, AR200-S, AR2200, AR2200-S, AR3200, AR3600, NetEngine16EX, SRG1300, SRG2300, SRG3300 Problem Types: Memory Leak Description: Some Huawei products have a memory leak vulnerability when handling some messages. A remote attacker with operation privilege could exploit the vulnerability by sending specific messages continuously. Successful exploit may cause some service to be abnormal. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20
al Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20191023-01-memory-en
CVE ID: CVE-2019-5294 State: PUBLISHED Published: 2019-11-13T16:12:44 Last Updated: 2024-08-04T19:54:52.406Z Vendors: n/a Products: AR120-S,AR1200,AR1200-S,AR150,AR150-S,AR160,AR200,AR200-S,AR2200,AR2200-S,AR3200,AR3600,NetEngine16EX,SRG1300,SRG2300,SRG3300 Problem Types: Out-Of-Bound Read Description: There is an out of bound read vulnerability in some Huawei products. A remote, unauthenticated attacker may send a corrupt or crafted message to the affected products. Due to a buffer read overflow error when parsing the message, successful exploit may cause some service to be abnormal. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-adv
e abnormal. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20191023-01-buffer-en
CVE ID: CVE-2019-5295 State: PUBLISHED Published: 2019-06-06T14:39:27 Last Updated: 2024-08-04T19:54:53.234Z Vendors: Huawei Products: Honor V10 Problem Types: authorization bypass Description: Huawei Honor V10 smartphones versions earlier than Berkeley-AL20 9.0.0.125(C00E125R2P14T8) have an authorization bypass vulnerability. Due to improper authorization implementation logic, attackers can bypass certain authorization scopes of smart phones by performing specific operations. This vulnerability can be exploited to perform operations beyond the scope of authorization. Additional Analyst Notes: - CVE Program Container: References: - https://www.huawei.com/en/psirt/security-advisories/huawei-s
ional Analyst Notes: - CVE Program Container: References: - https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190131-01-phone-en
CVE ID: CVE-2019-5296 State: PUBLISHED Published: 2019-06-04T17:56:37 Last Updated: 2024-08-04T19:54:53.153Z Vendors: Huawei Products: Mate20 Problem Types: out-of-bounds read Description: Mate20 Huawei smartphones versions earlier than HMA-AL00C00B175 have an out-of-bounds read vulnerability. An attacker with a high permission runs some specific commands on the smartphone. Due to insufficient input verification, successful exploit may cause out-of-bounds read of the memory and the system abnormal. Additional Analyst Notes: - CVE Program Container: References: - https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190220-01-phone-en
CVE ID: CVE-2019-5297 State: PUBLISHED Published: 2019-06-04T18:19:49 Last Updated: 2024-08-04T19:54:53.218Z Vendors: Huawei Products: Emily-L29C Problem Types: FRP bypass Description: Emily-L29C Huawei phones versions earlier than 9.0.0.159 (C185E2R1P12T8) have a Factory Reset Protection (FRP) bypass security vulnerability. Before the FRP account is verified and activated during the reset process, the attacker can perform some special operations to bypass the FRP function and obtain the right to use the mobile phone. Additional Analyst Notes: - CVE Program Container: References: - https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190305-01-frp-en
CVE ID: CVE-2019-5298 State: PUBLISHED Published: 2019-06-04T18:25:43 Last Updated: 2024-08-04T19:54:52.529Z Vendors: Huawei Products: AP4050DN-E Problem Types: improper authentication Description: There is an improper authentication vulnerability in some Huawei AP products before version V200R009C00SPC800. Due to the improper implementation of authentication for the serial port, an attacker could exploit this vulnerability by connecting to the affected products and running a series of commands. Additional Analyst Notes: - CVE Program Container: References: - https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190327-01-ap-en
CVE ID: CVE-2019-5299 State: PUBLISHED Published: 2019-08-13T20:34:23 Last Updated: 2024-08-04T19:54:53.454Z Vendors: Huawei Products: Hima-AL00B Problem Types: signature verification bypass Description: Huawei mobile phones Hima-AL00Bhave with Versions earlier than HMA-AL00C00B175 have a signature verification bypass vulnerability. Attackers can induce users to install malicious applications. Due to a defect in the signature verification logic, the malicious applications can invoke specific interface to execute malicious code. A successful exploit may result in the execution of arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - https://www.huawei.com/en/psirt/s
on of arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190320-01-phone-en
CVE ID: CVE-2019-5300 State: PUBLISHED Published: 2019-06-04T18:30:58 Last Updated: 2024-08-04T19:54:52.437Z Vendors: Huawei Products: AR1200, AR1200-S, AR150, AR160, AR200, AR2200, AR2200-S, AR3200, SRG1300, SRG2300, SRG3300 Problem Types: digital signature verification bypass Description: There is a digital signature verification bypass vulnerability in AR1200, AR1200-S, AR150, AR160, AR200, AR2200, AR2200-S, AR3200, SRG1300, SRG2300 and SRG3300 Huawei routers. The vulnerability is due to the affected software improperly verifying digital signatures for the software image in the affected device. A local attacker with high privilege may exploit the vulnerability to bypass integrity checks f
in the affected device. A local attacker with high privilege may exploit the vulnerability to bypass integrity checks for software images and install a malicious software image on the affected device. Additional Analyst Notes: - CVE Program Container: References: - https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190320-01-ar-en
CVE ID: CVE-2019-5301 State: PUBLISHED Published: 2019-08-08T16:33:45 Last Updated: 2024-08-04T19:54:52.449Z Vendors: Huawei Products: Honor V20 Problem Types: information leak Description: Huawei smart phones Honor V20 with the versions before 9.0.1.161(C00E161R2P2) have an information leak vulnerability. An attacker may trick a user into installing a malicious application. Due to coding error during layer information processing, attackers can exploit this vulnerability to obtain some layer information. Additional Analyst Notes: - CVE Program Container: References: - https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190807-01-mobile-en
CVE ID: CVE-2019-5302 State: PUBLISHED Published: 2020-04-27T19:50:50 Last Updated: 2024-08-04T19:54:52.990Z Vendors: Huawei Products: Sydney-L21, Sydney-L21BR, Sydney-L22, Sydney-L22BR, SydneyM-AL00, SydneyM-L01, SydneyM-L03, SydneyM-L21, SydneyM-L22, SydneyM-L23, Yale-L21A, Honor 20, Honor Magic2, Honor V20, HUAWEI Mate 20, HUAWEI Mate 20 Pro, HUAWEI Mate 20 RS, HUAWEI Mate 20 X, HUAWEI P20, HUAWEI P20 Pro, HUAWEI P30, HUAWEI P30 Pro, HUAWEI Y9 2019, HUAWEI nova lite 3, Honor 10 Lite, Honor 8X, Honor View 20, Jackman-L22, Paris-L21B, Paris-L21MEB, Paris-L29B, Sydney-AL00, Charlotte-L29C, Columbia-AL10B, Columbia-L29D, Cornell-AL00A, Cornell-L29A, Emily-L09C, Emily-L29C, Ever-L29B, ALP-AL00
Charlotte-L29C, Columbia-AL10B, Columbia-L29D, Cornell-AL00A, Cornell-L29A, Emily-L09C, Emily-L29C, Ever-L29B, ALP-AL00B, ALP-L09, ALP-L29, BLA-L29C, Berkeley-AL20, Berkeley-L09, Charlotte-L09C Problem Types: Denial of Service Description: There are two denial of service vulnerabilities on some Huawei smartphones. An attacker may send specially crafted TD-SCDMA messages from a rogue base station to the affected devices. Due to insufficient input validation of two values when parsing the messages, successful exploit may cause device abnormal. This is 1 out of 2 vulnerabilities. Different than CVE-2020-5303. Affected products are: ALP-AL00B: earlier than 9.1.0.333(C00E333R2P1T8) ALP-L09: earl
ies. Different than CVE-2020-5303. Affected products are: ALP-AL00B: earlier than 9.1.0.333(C00E333R2P1T8) ALP-L09: earlier than 9.1.0.300(C432E4R1P9T8) ALP-L29: earlier than 9.1.0.315(C636E5R1P13T8) BLA-L29C: earlier than 9.1.0.321(C636E4R1P14T8), earlier than 9.1.0.330(C432E6R1P12T8), earlier than 9.1.0.302(C635E4R1P13T8) Berkeley-AL20: earlier than 9.1.0.333(C00E333R2P1T8) Berkeley-L09: earlier than 9.1.0.350(C10E3R1P14T8), earlier than 9.1.0.351(C432E5R1P13T8), earlier than 9.1.0.350(C636E4R1P13T8) Charlotte-L09C: earlier than 9.1.0.311(C185E4R1P11T8), earlier than 9.1.0.345(C432E8R1P11T8) Charlotte-L29C: earlier than 9.1.0.325(C185E4R1P11T8), earlier than 9.1.0.335(C636E3R1P13T8), earli
0.345(C432E8R1P11T8) Charlotte-L29C: earlier than 9.1.0.325(C185E4R1P11T8), earlier than 9.1.0.335(C636E3R1P13T8), earlier than 9.1.0.345(C432E8R1P11T8), earlier than 9.1.0.336(C605E3R1P12T8) Columbia-AL10B: earlier than 9.1.0.333(C00E333R1P1T8) Columbia-L29D: earlier than 9.1.0.350(C461E3R1P11T8), earlier than 9.1.0.350(C185E3R1P12T8), earlier than 9.1.0.350(C10E5R1P14T8), earlier than 9.1.0.351(C432E5R1P13T8) Cornell-AL00A: earlier than 9.1.0.333(C00E333R1P1T8) Cornell-L29A: earlier than 9.1.0.328(C185E1R1P9T8), earlier than 9.1.0.328(C432E1R1P9T8), earlier than 9.1.0.330(C461E1R1P9T8), earlier than 9.1.0.328(C636E2R1P12T8) Emily-L09C: earlier than 9.1.0.336(C605E4R1P12T8), earlier than 9.
(C461E1R1P9T8), earlier than 9.1.0.328(C636E2R1P12T8) Emily-L09C: earlier than 9.1.0.336(C605E4R1P12T8), earlier than 9.1.0.311(C185E2R1P12T8), earlier than 9.1.0.345(C432E10R1P12T8) Emily-L29C: earlier than 9.1.0.311(C605E2R1P12T8), earlier than 9.1.0.311(C636E7R1P13T8), earlier than 9.1.0.311(C432E7R1P11T8) Ever-L29B: earlier than 9.1.0.311(C185E3R3P1), earlier than 9.1.0.310(C636E3R2P1), earlier than 9.1.0.310(C432E3R1P12) HUAWEI Mate 20: earlier than 9.1.0.131(C00E131R3P1) HUAWEI Mate 20 Pro: earlier than 9.1.0.310(C185E10R2P1) HUAWEI Mate 20 RS: earlier than 9.1.0.135(C786E133R3P1) HUAWEI Mate 20 X: earlier than 9.1.0.135(C00E133R2P1) HUAWEI P20: earlier than 9.1.0.333(C00E333R1P1T8) HU
C786E133R3P1) HUAWEI Mate 20 X: earlier than 9.1.0.135(C00E133R2P1) HUAWEI P20: earlier than 9.1.0.333(C00E333R1P1T8) HUAWEI P20 Pro: earlier than 9.1.0.333(C00E333R1P1T8) HUAWEI P30: earlier than 9.1.0.193 HUAWEI P30 Pro: earlier than 9.1.0.186(C00E180R2P1) HUAWEI Y9 2019: earlier than 9.1.0.220(C605E3R1P1T8) HUAWEI nova lite 3: earlier than 9.1.0.305(C635E8R2P2) Honor 10 Lite: earlier than 9.1.0.283(C605E8R2P2) Honor 8X: earlier than 9.1.0.221(C461E2R1P1T8) Honor View 20: earlier than 9.1.0.238(C432E1R3P1) Jackman-L22: earlier than 9.1.0.247(C636E2R4P1T8) Paris-L21B: earlier than 9.1.0.331(C432E1R1P2T8) Paris-L21MEB: earlier than 9.1.0.331(C185E4R1P3T8) Paris-L29B: earlier than 9.1.0.331(C
ier than 9.1.0.331(C432E1R1P2T8) Paris-L21MEB: earlier than 9.1.0.331(C185E4R1P3T8) Paris-L29B: earlier than 9.1.0.331(C636E1R1P3T8) Sydney-AL00: earlier than 9.1.0.212(C00E62R1P7T8) Sydney-L21: earlier than 9.1.0.215(C432E1R1P1T8), earlier than 9.1.0.213(C185E1R1P1T8) Sydney-L21BR: earlier than 9.1.0.213(C185E1R1P2T8) Sydney-L22: earlier than 9.1.0.258(C636E1R1P1T8) Sydney-L22BR: earlier than 9.1.0.258(C636E1R1P1T8) SydneyM-AL00: earlier than 9.1.0.228(C00E78R1P7T8) SydneyM-L01: earlier than 9.1.0.215(C782E2R1P1T8), earlier than 9.1.0.213(C185E1R1P1T8), earlier than 9.1.0.270(C432E3R1P1T8) SydneyM-L03: earlier than 9.1.0.217(C605E1R1P1T8) SydneyM-L21: earlier than 9.1.0.221(C461E1R1P1T8), e
270(C432E3R1P1T8) SydneyM-L03: earlier than 9.1.0.217(C605E1R1P1T8) SydneyM-L21: earlier than 9.1.0.221(C461E1R1P1T8), earlier than 9.1.0.215(C432E4R1P1T8) SydneyM-L22: earlier than 9.1.0.259(C185E1R1P2T8), earlier than 9.1.0.220(C635E1R1P2T8), earlier than 9.1.0.216(C569E1R1P1T8) SydneyM-L23: earlier than 9.1.0.226(C605E2R1P1T8) Yale-L21A: earlier than 9.1.0.154(C432E2R3P2), earlier than 9.1.0.154(C461E2R2P1), earlier than 9.1.0.154(C636E2R2P1) Honor 20: earlier than 9.1.0.152(C00E150R5P1) Honor Magic2: earlier than 10.0.0.187 Honor V20: earlier than 9.1.0.234(C00E234R4P3) Additional Analyst Notes: - CVE Program Container: References: - https://www.huawei.com/en/psirt/security-advisories/hu
Additional Analyst Notes: - CVE Program Container: References: - https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190814-01-mobile-en
CVE ID: CVE-2019-5303 State: PUBLISHED Published: 2020-04-27T20:01:02 Last Updated: 2024-08-04T19:54:53.218Z Vendors: Huawei Products: ALP-AL00B, ALP-L09, ALP-L29, BLA-L29C, Berkeley-AL20, Berkeley-L09, Charlotte-L09C, Charlotte-L29C, Columbia-AL10B, Columbia-L29D, Cornell-AL00A, Cornell-L29A, Emily-L09C, Emily-L29C, Ever-L29B, HUAWEI Mate 20, HUAWEI Mate 20 Pro, HUAWEI Mate 20 RS, HUAWEI Mate 20 X, HUAWEI P20, HUAWEI P20 Pro, HUAWEI P30, HUAWEI P30 Pro, HUAWEI Y9 2019, HUAWEI nova lite 3, Honor 10 Lite, Honor 8X, Honor View 20, Jackman-L22, Paris-L21B, Paris-L21MEB, Paris-L29B, Sydney-AL00, Sydney-L21, Sydney-L21BR, Sydney-L22, Sydney-L22BR, SydneyM-AL00, SydneyM-L01, SydneyM-L03, SydneyM-L
L29B, Sydney-AL00, Sydney-L21, Sydney-L21BR, Sydney-L22, Sydney-L22BR, SydneyM-AL00, SydneyM-L01, SydneyM-L03, SydneyM-L21, SydneyM-L22, SydneyM-L23, Yale-L21A, Honor 20, Honor Magic2, Honor V20 Problem Types: Denial of Service Description: There are two denial of service vulnerabilities on some Huawei smartphones. An attacker may send specially crafted TD-SCDMA messages from a rogue base station to the affected devices. Due to insufficient input validation of two values when parsing the messages, successful exploit may cause device abnormal. This is 2 out of 2 vulnerabilities. Different than CVE-2020-5302. Affected products are: ALP-AL00B: earlier than 9.1.0.333(C00E333R2P1T8) ALP-L09: earl
ies. Different than CVE-2020-5302. Affected products are: ALP-AL00B: earlier than 9.1.0.333(C00E333R2P1T8) ALP-L09: earlier than 9.1.0.300(C432E4R1P9T8) ALP-L29: earlier than 9.1.0.315(C636E5R1P13T8) BLA-L29C: earlier than 9.1.0.321(C636E4R1P14T8), earlier than 9.1.0.330(C432E6R1P12T8), earlier than 9.1.0.302(C635E4R1P13T8) Berkeley-AL20: earlier than 9.1.0.333(C00E333R2P1T8) Berkeley-L09: earlier than 9.1.0.350(C10E3R1P14T8), earlier than 9.1.0.351(C432E5R1P13T8), earlier than 9.1.0.350(C636E4R1P13T8) Charlotte-L09C: earlier than 9.1.0.311(C185E4R1P11T8), earlier than 9.1.0.345(C432E8R1P11T8) Charlotte-L29C: earlier than 9.1.0.325(C185E4R1P11T8), earlier than 9.1.0.335(C636E3R1P13T8), earli
CVE ID: CVE-2019-5304 State: PUBLISHED Published: 2020-01-03T14:33:41 Last Updated: 2024-08-04T19:54:53.290Z Vendors: n/a Products: AR120-S;AR1200;AR1200-S;AR150;AR150-S;AR160;AR200;AR200-S;AR2200;AR2200-S;AR3200;AR3600;IPS Module;NGFW Module;NIP6300;NIP6600;NetEngine16EX;S5700;S6700;SRG1300;SRG2300;SRG3300;Secospace AntiDDoS8000;Secospace USG6300;Secospace USG6500;Secospace USG6600 Problem Types: Buffer Error Description: Some Huawei products have a buffer error vulnerability. An unauthenticated, remote attacker could send specific MPLS Echo Request messages to the target products. Due to insufficient input validation of some parameters in the messages, successful exploit may cause the devi
products. Due to insufficient input validation of some parameters in the messages, successful exploit may cause the device to reset. Additional Analyst Notes: - CVE Program Container: References: - https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200102-01-buffer-en
CVE ID: CVE-2019-5305 State: PUBLISHED Published: 2019-06-06T14:35:18 Last Updated: 2024-08-04T19:54:53.241Z Vendors: Huawei Products: Mate 10 Problem Types: memory double free Description: The image processing module of some Huawei Mate 10 smartphones versions before ALP-L29 9.0.0.159(C185) has a memory double free vulnerability. An attacker tricks a user into installing a malicious application, and the application can call special API, which could trigger double free and cause a system crash. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190128-01-ivp-en
CVE ID: CVE-2019-5306 State: PUBLISHED Published: 2019-06-04T17:58:22 Last Updated: 2024-08-04T19:54:53.209Z Vendors: Huawei Products: P20 Problem Types: FRP bypass Description: There is a Factory Reset Protection (FRP) bypass security vulnerability in P20 Huawei smart phones versions before Emily-AL00A 9.0.0.167(C00E81R1P21T8). When re-configuring the mobile phone using the FRP function, an attacker can delete the activation lock after a series of operations. As a result, the FRP function is bypassed and the attacker gains access to the smartphone. Additional Analyst Notes: - CVE Program Container: References: - https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190228-01-smart
: - CVE Program Container: References: - https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190228-01-smartphone-en
CVE ID: CVE-2019-5307 State: PUBLISHED Published: 2019-06-04T18:55:48 Last Updated: 2024-08-04T19:54:53.216Z Vendors: Huawei Products: P30,P30 Pro Problem Types: message replay Description: Some Huawei 4G LTE devices, P30 versions before ELE-AL00 9.1.0.162(C01E160R1P12/C01E160R2P1) and P30 Pro versions before VOG-AL00 9.1.0.162(C01E160R1P12/C01E160R2P1), are exposed to a message replay vulnerability. For the sake of better compatibility, these devices implement a less strict check on the NAS message sequence number (SN), specifically NAS COUNT. As a result, an attacker can construct a rogue base station and replay the GUTI reallocation command message in certain conditions to tamper with GUT
construct a rogue base station and replay the GUTI reallocation command message in certain conditions to tamper with GUTIs, or replay the Identity request message to obtain IMSIs. (Vulnerability ID: HWPSIRT-2019-04107) Additional Analyst Notes: - CVE Program Container: References: - https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190529-01-replay-en
CVE ID: CVE-2019-5308 State: PUBLISHED Published: 2019-11-29T20:11:37 Last Updated: 2024-08-04T19:54:53.152Z Vendors: n/a Products: Mate 20 RS Problem Types: Improper Authorization Description: Mate 20 RS smartphones with versions earlier than 9.1.0.135(C786E133R3P1) have an improper authorization vulnerability. The software does not properly restrict certain operation in ADB mode, successful exploit could allow the attacker to switch to third desktop after a series of operation. Additional Analyst Notes: - CVE Program Container: References: - https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20191127-01-smartphone-en