CVE-2019-5215
Medium
Description
There is a man-in-the-middle (MITM) vulnerability on Huawei P30 smartphones versions before ELE-AL00 9.1.0.162(C01E160R1P12/C01E160R2P1), and P30 Pro versions before VOG-AL00 9.1.0.162 (C01E160R1P12/C01E160R2P1). When users establish connection and transfer data through Huawei Share, an attacker could sniff, spoof and do a series of operations to intrude the Huawei Share connection and launch a man-in-the-middle attack to obtain and tamper the data. (Vulnerability ID: HWPSIRT-2019-03109)
SeverityMedium
CVSS6.8
Exploit probability—
ProductHuawei P30 Pro Firmware
PublishedJun 4, 2019
First seenJun 4, 2019
How to fix
Update
- huawei p30_pro_firmwarevog-al00_9.1.0.162\(c01e160r1p12\/c01e160r2p1\) or later
- huawei p30_firmwareele-al00_9.1.0.162\(c01e160r1p12\/c01e160r2p1\) or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| huawei p30_pro_firmware | v < vog-al00_9.1.0.162\(c01e160r1p12\/c01e160r2p1\) | vog-al00_9.1.0.162\(c01e160r1p12\/c01e160r2p1\) |
| huawei p30_firmware | v < ele-al00_9.1.0.162\(c01e160r1p12\/c01e160r2p1\) | ele-al00_9.1.0.162\(c01e160r1p12\/c01e160r2p1\) |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.