Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2019-5216

Опубликовано: 06 июн. 2019
Источник: nvd
CVSS3: 7
CVSS2: 7.6
EPSS Низкий

Описание

There is a race condition vulnerability on Huawei Honor V10 smartphones versions earlier than Berkeley-AL20 9.0.0.156(C00E156R2P14T8), Honor 10 smartphones versions earlier than Columbia-AL10B 9.0.0.156(C00E156R1P20T8) and Honor Play smartphones versions earlier than Cornell-AL00A 9.0.0.156(C00E156R1P13T8). An attacker tricks the user into installing a malicious application, which makes multiple processes to operate the same variate at the same time. Successful exploit could cause execution of malicious code.

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:huawei:honor_view_10_firmware:*:*:*:*:*:*:*:*
Версия до berkeley-al20_9.0.0.156\(c00e156r2p14t8\) (исключая)
cpe:2.3:h:huawei:honor_view_10:-:*:*:*:*:*:*:*
Конфигурация 2

Одновременно

cpe:2.3:o:huawei:honor_10_firmware:*:*:*:*:*:*:*:*
Версия до columbia-al10b_9.0.0.156\(c00e156r1p20t8\) (исключая)
cpe:2.3:h:huawei:honor_10:-:*:*:*:*:*:*:*
Конфигурация 3

Одновременно

cpe:2.3:o:huawei:honor_play_firmware:*:*:*:*:*:*:*:*
Версия до cornell-al00a_9.0.0.156\(c00e156r1p13t8\) (исключая)
cpe:2.3:h:huawei:honor_play:-:*:*:*:*:*:*:*

EPSS

Процентиль: 25%
0.00084
Низкий

7 High

CVSS3

7.6 High

CVSS2

Дефекты

CWE-362

Связанные уязвимости

CVSS3: 7
github
больше 3 лет назад

There is a race condition vulnerability on Huawei Honor V10 smartphones versions earlier than Berkeley-AL20 9.0.0.156(C00E156R2P14T8), Honor 10 smartphones versions earlier than Columbia-AL10B 9.0.0.156(C00E156R1P20T8) and Honor Play smartphones versions earlier than Cornell-AL00A 9.0.0.156(C00E156R1P13T8). An attacker tricks the user into installing a malicious application, which makes multiple processes to operate the same variate at the same time. Successful exploit could cause execution of malicious code.

EPSS

Процентиль: 25%
0.00084
Низкий

7 High

CVSS3

7.6 High

CVSS2

Дефекты

CWE-362