CVE-2019-5226
Medium
Description
P30, P30 Pro, Mate 20 smartphones with software of versions earlier than ELLE-AL00B 9.1.0.193(C00E190R2P1), versions earlier than VOGUE-AL00A 9.1.0.193(C00E190R2P1), versions earlier than Hima-AL00B 9.1.0.135(C00E133R2P1) and HiSuite with versions earlier than HiSuite 9.1.0.305 have a version downgrade vulnerability. The device and HiSuite software do not validate the upgrade package sufficiently, so that the system of smartphone can be downgraded to an older version.
SeverityMedium
CVSS5.5
Exploit probability—
ProductHuawei Mate 20 Firmware
PublishedNov 29, 2019
First seenNov 29, 2019
How to fix
Update
- huawei mate_20_firmwarehima-al00b_9.1.0.135\(c00e133r2p1\) or later
- huawei p30_firmwareelle-al00b_9.1.0.193\(c00e190r2p1\) or later
- huawei p30_pro_firmwarevogue-al00a_9.1.0.193\(c00e190r2p1\) or later
- huawei hisuite_firmware9.1.0.305 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| huawei mate_20_firmware | v < hima-al00b_9.1.0.135\(c00e133r2p1\) | hima-al00b_9.1.0.135\(c00e133r2p1\) |
| huawei p30_firmware | v < elle-al00b_9.1.0.193\(c00e190r2p1\) | elle-al00b_9.1.0.193\(c00e190r2p1\) |
| huawei p30_pro_firmware | v < vogue-al00a_9.1.0.193\(c00e190r2p1\) | vogue-al00a_9.1.0.193\(c00e190r2p1\) |
| huawei hisuite_firmware | v < 9.1.0.305 | 9.1.0.305 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.