Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2019-5215

Опубликовано: 04 июн. 2019
Источник: nvd
CVSS3: 6.8
CVSS2: 4.3
EPSS Низкий

Описание

There is a man-in-the-middle (MITM) vulnerability on Huawei P30 smartphones versions before ELE-AL00 9.1.0.162(C01E160R1P12/C01E160R2P1), and P30 Pro versions before VOG-AL00 9.1.0.162 (C01E160R1P12/C01E160R2P1). When users establish connection and transfer data through Huawei Share, an attacker could sniff, spoof and do a series of operations to intrude the Huawei Share connection and launch a man-in-the-middle attack to obtain and tamper the data. (Vulnerability ID: HWPSIRT-2019-03109)

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:huawei:p30_pro_firmware:*:*:*:*:*:*:*:*
Версия до vog-al00_9.1.0.162\(c01e160r1p12\/c01e160r2p1\) (исключая)
cpe:2.3:h:huawei:p30_pro:-:*:*:*:*:*:*:*
Конфигурация 2

Одновременно

cpe:2.3:o:huawei:p30_firmware:*:*:*:*:*:*:*:*
Версия до ele-al00_9.1.0.162\(c01e160r1p12\/c01e160r2p1\) (исключая)
cpe:2.3:h:huawei:p30:-:*:*:*:*:*:*:*

EPSS

Процентиль: 11%
0.00037
Низкий

6.8 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

CVSS3: 6.8
github
больше 3 лет назад

There is a man-in-the-middle (MITM) vulnerability on Huawei P30 smartphones versions before ELE-AL00 9.1.0.162(C01E160R1P12/C01E160R2P1), and P30 Pro versions before VOG-AL00 9.1.0.162 (C01E160R1P12/C01E160R2P1). When users establish connection and transfer data through Huawei Share, an attacker could sniff, spoof and do a series of operations to intrude the Huawei Share connection and launch a man-in-the-middle attack to obtain and tamper the data. (Vulnerability ID: HWPSIRT-2019-03109)

EPSS

Процентиль: 11%
0.00037
Низкий

6.8 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

NVD-CWE-noinfo