CVE-2019-5246
Summary
| CVE | CVE-2019-5246 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2019-11-13 00:15:00 UTC |
| Updated | 2019-11-15 17:57:00 UTC |
| Description | Smartphones with software of ELLE-AL00B 9.1.0.109(C00E106R1P21), 9.1.0.113(C00E110R1P21), 9.1.0.125(C00E120R1P21), 9.1.0.135(C00E130R1P21), 9.1.0.153(C00E150R1P21), 9.1.0.155(C00E150R1P21), 9.1.0.162(C00E160R2P1) have an insufficient verification vulnerability. The system does not verify certain parameters sufficiently, an attacker should connect to the phone and gain high privilege to launch the attack. Successful exploit could cause DOS or malicious code execution. |
Risk And Classification
Problem Types: CWE-345
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Hardware | Huawei | Elle-al00b | - | All | All | All |
| Hardware | Huawei | Elle-al00b | - | All | All | All |
| Operating System | Huawei | Elle-al00b Firmware | 9.1.0.109(c00e106r1p21) | All | All | All |
| Operating System | Huawei | Elle-al00b Firmware | 9.1.0.109\(c00e106r1p21\) | All | All | All |
| Operating System | Huawei | Elle-al00b Firmware | 9.1.0.113(c00e110r1p21) | All | All | All |
| Operating System | Huawei | Elle-al00b Firmware | 9.1.0.113\(c00e110r1p21\) | All | All | All |
| Operating System | Huawei | Elle-al00b Firmware | 9.1.0.125(c00e120r1p21) | All | All | All |
| Operating System | Huawei | Elle-al00b Firmware | 9.1.0.125\(c00e120r1p21\) | All | All | All |
| Operating System | Huawei | Elle-al00b Firmware | 9.1.0.135(c00e130r1p21) | All | All | All |
| Operating System | Huawei | Elle-al00b Firmware | 9.1.0.135\(c00e130r1p21\) | All | All | All |
| Operating System | Huawei | Elle-al00b Firmware | 9.1.0.153(c00e150r1p21) | All | All | All |
| Operating System | Huawei | Elle-al00b Firmware | 9.1.0.153\(c00e150r1p21\) | All | All | All |
| Operating System | Huawei | Elle-al00b Firmware | 9.1.0.155(c00e150r1p21) | All | All | All |
| Operating System | Huawei | Elle-al00b Firmware | 9.1.0.155\(c00e150r1p21\) | All | All | All |
| Operating System | Huawei | Elle-al00b Firmware | 9.1.0.162(c00e160r2p1) | All | All | All |
| Operating System | Huawei | Elle-al00b Firmware | 9.1.0.162\(c00e160r2p1\) | All | All | All |
| Operating System | Huawei | Elle-al00b Firmware | 9.1.0.109\(c00e106r1p21\) | All | All | All |
| Operating System | Huawei | Elle-al00b Firmware | 9.1.0.113\(c00e110r1p21\) | All | All | All |
| Operating System | Huawei | Elle-al00b Firmware | 9.1.0.125\(c00e120r1p21\) | All | All | All |
| Operating System | Huawei | Elle-al00b Firmware | 9.1.0.135\(c00e130r1p21\) | All | All | All |
| Operating System | Huawei | Elle-al00b Firmware | 9.1.0.153\(c00e150r1p21\) | All | All | All |
| Operating System | Huawei | Elle-al00b Firmware | 9.1.0.155\(c00e150r1p21\) | All | All | All |
| Operating System | Huawei | Elle-al00b Firmware | 9.1.0.162\(c00e160r2p1\) | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Security Advisory - Insufficient Verification Vulnerability in Several Smartphones | MISC | www.huawei.com | Vendor Advisory |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.