CVE-2019-5246: Medium severity huawei elle-al00b vulnerability
Smartphones with software of ELLE-AL00B 9.1.0.109(C00E106R1P21), 9.1.0.113(C00E110R1P21), 9.1.0.125(C00E120R1P21), 9.1.0.135(C00E130R1P21), 9.1.0.153(C00E150R1P21), 9.1.0.155(C00E150R1P21), 9.1.0.162(C00E160R2P1) have an insufficient verification vulnerability. The system does not verify certain parameters sufficiently, an attacker should connect to the phone and gain high privilege to launch the attack. Successful exploit could cause DOS or malicious code execution.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability CVE-2019-5246?
CVE-2019-5246 is an insufficient verification vulnerability found in smartphones with software of ELLE-AL00B 9.1.0.109(C00E106R1P21), 9.1.0.113(C00E110R1P21), 9.1.0.125(C00E120R1P21), 9.1.0.135(C00E130R1P21), 9.1.0.153(C00E150R1P21), 9.1.0.155(C00E150R1P21), 9.1.0.162(C00E160R2P1).
How severe is the vulnerability CVE-2019-5246?
The severity of CVE-2019-5246 is rated as medium with a CVSS score of 6.2.
What is the affected software version of CVE-2019-5246?
The affected software versions of CVE-2019-5246 are ELLE-AL00B 9.1.0.109(C00E106R1P21), 9.1.0.113(C00E110R1P21), 9.1.0.125(C00E120R1P21), 9.1.0.135(C00E130R1P21), 9.1.0.153(C00E150R1P21), 9.1.0.155(C00E150R1P21), 9.1.0.162(C00E160R2P1).
How can I fix the vulnerability CVE-2019-5246?
To fix the vulnerability CVE-2019-5246, it is recommended to update the software of ELLE-AL00B to a non-vulnerable version provided by Huawei.
Where can I find more information about the vulnerability CVE-2019-5246?
More information about the vulnerability CVE-2019-5246 can be found on the Huawei security advisory website at http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190925-01-codeexecution-en.