CVE-2019-5222
Medium
Description
There is an information disclosure vulnerability on Secure Input of certain Huawei smartphones in Versions earlier than Tony-AL00B 9.1.0.216(C00E214R2P1). The Secure Input does not properly limit certain system privilege. An attacker tricks the user to install a malicious application and successful exploit could result in information disclosure.
SeverityMedium
CVSS5.5
Exploit probability—
ProductHuawei Honor Magic 2 Firmware
PublishedJul 17, 2019
First seenJul 17, 2019
How to fix
Update
- huawei honor_magic_2_firmwaretony-al00b_9.1.0.216\(c00e214r2p1\) or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| huawei honor_magic_2_firmware | v < tony-al00b_9.1.0.216\(c00e214r2p1\) | tony-al00b_9.1.0.216\(c00e214r2p1\) |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.