CVE-2019-5251: Path Traversal
There is a path traversal vulnerability in several Huawei smartphones. The system does not sufficiently validate certain pathnames from the application. An attacker could trick the user into installing, backing up and restoring a malicious application. Successful exploit could cause information disclosure.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2019-5251?
CVE-2019-5251 is a path traversal vulnerability in several Huawei smartphones that allows an attacker to trick users into installing a malicious application.
Which Huawei smartphones are affected by CVE-2019-5251?
Several Huawei smartphones including Huawei Honor V10, Huawei P30, Huawei Enjoy 7s, Huawei Mate 20, Huawei Honor 9 Lite, Huawei Honor 9i, Huawei M6, and Huawei Honor 20s are affected by CVE-2019-5251.
What is the severity of CVE-2019-5251?
The severity of CVE-2019-5251 is medium, with a CVSS score of 5.5.
How can an attacker exploit CVE-2019-5251?
An attacker can exploit CVE-2019-5251 by tricking the user into installing, backing up, and restoring a malicious application.
Is there a fix available for CVE-2019-5251?
Users should apply the latest firmware or security patches provided by Huawei to mitigate the CVE-2019-5251 vulnerability.