CVE-2019-5213: Low severity huawei honor play firmware vulnerability
Honor play smartphones with versions earlier than Cornell-AL00A 9.1.0.321(C00E320R1P1T8) have an insufficient authentication vulnerability. The system has a logic judge error under certain scenario. Successful exploit could allow the attacker to modify the alarm clock settings after a serious of uncommon operations without unlock the screen lock.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID of this vulnerability?
The vulnerability ID of this vulnerability is CVE-2019-5213.
What is the title of this vulnerability?
The title of this vulnerability is 'Honor play smartphones with versions earlier than Cornell-AL00A 9.1.0.321(C00E320R1P1T8) have an insufficient authentication vulnerability.'
What is the severity of CVE-2019-5213?
The severity of CVE-2019-5213 is low with a CVSS score of 2.4.
How can an attacker exploit this vulnerability?
An attacker can exploit this vulnerability by taking advantage of a logic judge error in the system under certain scenarios and modify the alarm clock settings.
Is Huawei Honor Play affected by this vulnerability?
No, Huawei Honor Play is not affected by this vulnerability.