CVE-2019-5218
High
Description
There is an insufficient authentication vulnerability in Huawei Band 2 and Honor Band 3. The band does not sufficiently authenticate the device try to connect to it in certain scenario. Successful exploit could allow the attacker to spoof then connect to the band.
SeverityHigh
CVSS8.8
Exploit probability—
ProductHuawei Band 2 Firmware
PublishedNov 29, 2019
First seenNov 29, 2019
How to fix
Update
- huawei band_2_firmwareeris-b19\/eris-b29_1.2.53 or later
- huawei band_3_firmwarenyx-b10hn_1.5.53 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| huawei band_2_firmware | v < eris-b19\/eris-b29_1.2.53 | eris-b19\/eris-b29_1.2.53 |
| huawei band_3_firmware | v < nyx-b10hn_1.5.53 | nyx-b10hn_1.5.53 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.