CVE-2019-5309: Medium severity huawei honor play firmware vulnerability

Q: What is the severity of CVE-2019-5309?

The severity of CVE-2019-5309 is medium with a severity value of 4.6.

Q: Which devices are affected by CVE-2019-5309?

Honor Play smartphones with versions earlier than 9.1.0.333(C00E333R1P1T8) are affected by CVE-2019-5309.

Q: What is the vulnerability in CVE-2019-5309?

CVE-2019-5309 is an information disclosure vulnerability in certain Huawei devices.

Q: How can an attacker exploit CVE-2019-5309?

An attacker can exploit CVE-2019-5309 by viewing certain information without unlocking the screen lock.

Q: How can I fix CVE-2019-5309?

To fix CVE-2019-5309, update your Honor Play smartphone to version 9.1.0.333(C00E333R1P1T8) or later.

Published Nov 29, 2019

Updated

Honor play smartphones with versions earlier than 9.1.0.333(C00E333R1P1T8) have an information disclosure vulnerability in certain Huawei . An attacker could view certain information after a series of operation without unlock the screen lock. Successful exploit could cause an information disclosure condition.

Affected Software

2 affected components

Huawei Honor Play Firmware<9.1.0.333\(c00e333r1p1t8\)

Huawei Honor Play

Event History

Nov 29, 2019

CVE Published

via MITRE·08:21 PM

Data Sourced

via MITRE·08:21 PM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2019-5309?

The severity of CVE-2019-5309 is medium with a severity value of 4.6.

Which devices are affected by CVE-2019-5309?

Honor Play smartphones with versions earlier than 9.1.0.333(C00E333R1P1T8) are affected by CVE-2019-5309.

What is the vulnerability in CVE-2019-5309?

CVE-2019-5309 is an information disclosure vulnerability in certain Huawei devices.

How can an attacker exploit CVE-2019-5309?

An attacker can exploit CVE-2019-5309 by viewing certain information without unlocking the screen lock.

How can I fix CVE-2019-5309?