CVE-2019-5308

LOW

2.4

Description

Mate 20 RS smartphones with versions earlier than 9.1.0.135(C786E133R3P1) have an improper authorization vulnerability. The software does not properly restrict certain operation in ADB mode, successful exploit could allow the attacker to switch to third desktop after a series of operation.

CVE Details

CVSS v3.1 Score2.4

SeverityLOW

CVSS VectorCVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Attack VectorPHYSICAL

ComplexityLOW

Privileges RequiredNONE

User InteractionNONE

Published11/29/2019

Last Modified11/21/2024

Sourcenvd

Honeypot Sightings0

Affected Products

huawei:mate_20_rshuawei:mate_20_rs_firmware

References

https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20191127-01-smartphone-en(psirt@huawei.com)

https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20191127-01-smartphone-en(af854a3a-2127-422b-91ae-364da2661108)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.