CVE-2019-5252
First published: Fri Dec 13 2019(Updated: )
There is an improper authentication vulnerability in Huawei smartphones (Y9, Honor 8X, Honor 9 Lite, Honor 9i, Y6 Pro). The applock does not perform a sufficient authentication in a rare condition. Successful exploit could allow the attacker to use the application locked by applock in an instant.
Credit: psirt@huawei.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Huawei Enjoy 8 Plus Firmware | <9.1.0.124\(c00e112r1p6t8\) | |
| Huawei Enjoy 8 Plus | ||
| Huawei Y9 Firmware | <9.1.0.131\(c432e6r1p5t8\) | |
| Huawei Y9 | ||
| Huawei Honor 8x Firmware | <9.1.0.217\(c00e15r3p2t8\) | |
| Huawei Honor 8x | ||
| Huawei Honor 8x Firmware | <9.1.0.237\(c432e1r3p2t8\) | |
| Huawei Honor 8x Firmware | <9.1.0.237\(c636e2r4p1t8\) | |
| Huawei Honor 9 Lite Firmware | <9.1.0.124\(c00e112r2p10t8\) | |
| Huawei Honor 9 Lite | ||
| Huawei Honor 9 Lite Firmware | <9.1.0.136\(c636e5r1p5t8\) | |
| Huawei Honor 9i Firmware | <9.1.0.115\(c00e113r1p6t8\) | |
| Huawei Honor 9i | ||
| Huawei Honor 9i Firmware | <9.1.0.122\(c636e4r1p4t8\) | |
| Huawei Y6 Pro Firmware | <9.1.0.248\(c636e5r3p1\) | |
| Huawei Y6 Pro |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2019-5252?
CVE-2019-5252 is an improper authentication vulnerability in Huawei smartphones (Y9, Honor 8X, Honor 9 Lite, Honor 9i, Y6 Pro).
Which Huawei smartphones are affected by CVE-2019-5252?
Huawei smartphones including Y9, Honor 8X, Honor 9 Lite, Honor 9i, and Y6 Pro are affected by CVE-2019-5252.
What is the severity of CVE-2019-5252?
CVE-2019-5252 has a severity rating of low.
How can an attacker exploit CVE-2019-5252?
An attacker can exploit CVE-2019-5252 by using the application locked by the applock in an instant.
Is there a fix available for CVE-2019-5252?
For information about the fix for CVE-2019-5252, please refer to the Huawei security advisory.
- collector/nvd-index
- agent/weakness
- agent/severity
- agent/references
- agent/author
- agent/type
- agent/event
- agent/description
- agent/last-modified-date
- agent/softwarecombine
- agent/first-publish-date
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/huawei
- canonical/huawei enjoy 8 plus firmware
- canonical/huawei enjoy 8 plus
- canonical/huawei y9 firmware
- canonical/huawei y9
- canonical/huawei honor 8x firmware
- canonical/huawei honor 8x
- canonical/huawei honor 9 lite firmware
- canonical/huawei honor 9 lite
- canonical/huawei honor 9i firmware
- canonical/huawei honor 9i
- canonical/huawei y6 pro firmware
- canonical/huawei y6 pro