CVE-2019-5252
Low
Description
There is an improper authentication vulnerability in Huawei smartphones (Y9, Honor 8X, Honor 9 Lite, Honor 9i, Y6 Pro). The applock does not perform a sufficient authentication in a rare condition. Successful exploit could allow the attacker to use the application locked by applock in an instant.
SeverityLow
CVSS3.5
Exploit probability—
ProductHuawei Honor 8x Firmware
PublishedDec 14, 2019
First seenDec 14, 2019
How to fix
Update
- huawei honor_8x_firmware9.1.0.217\(c00e15r3p2t8\), 9.1.0.237\(c432e1r3p2t8\), 9.1.0.237\(c636e2r4p1t8\) or later
- huawei enjoy_8_plus_firmware9.1.0.124\(c00e112r1p6t8\) or later
- huawei y9_firmware9.1.0.131\(c432e6r1p5t8\) or later
- huawei honor_9_lite_firmware9.1.0.124\(c00e112r2p10t8\), 9.1.0.136\(c636e5r1p5t8\) or later
- huawei honor_9i_firmware9.1.0.115\(c00e113r1p6t8\), 9.1.0.122\(c636e4r1p4t8\) or later
- huawei y6_pro_firmware9.1.0.248\(c636e5r3p1\) or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| huawei honor_8x_firmware | v < 9.1.0.217\(c00e15r3p2t8\), v < 9.1.0.237\(c432e1r3p2t8\), v < 9.1.0.237\(c636e2r4p1t8\) | 9.1.0.217\(c00e15r3p2t8\), 9.1.0.237\(c432e1r3p2t8\), 9.1.0.237\(c636e2r4p1t8\) |
| huawei enjoy_8_plus_firmware | v < 9.1.0.124\(c00e112r1p6t8\) | 9.1.0.124\(c00e112r1p6t8\) |
| huawei y9_firmware | v < 9.1.0.131\(c432e6r1p5t8\) | 9.1.0.131\(c432e6r1p5t8\) |
| huawei honor_9_lite_firmware | v < 9.1.0.124\(c00e112r2p10t8\), v < 9.1.0.136\(c636e5r1p5t8\) | 9.1.0.124\(c00e112r2p10t8\), 9.1.0.136\(c636e5r1p5t8\) |
| huawei honor_9i_firmware | v < 9.1.0.115\(c00e113r1p6t8\), v < 9.1.0.122\(c636e4r1p4t8\) | 9.1.0.115\(c00e113r1p6t8\), 9.1.0.122\(c636e4r1p4t8\) |
| huawei y6_pro_firmware | v < 9.1.0.248\(c636e5r3p1\) | 9.1.0.248\(c636e5r3p1\) |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.