CVE-2019-5292
Low
Description
Honor 10 Lite, Honor 8A, Huawei Y6 mobile phones with the versions before 9.1.0.217(C00E215R3P1), the versions before 9.1.0.205(C00E97R1P9), the versions before 9.1.0.205(C00E97R2P2) have an information leak vulnerability. Due to improper function error records of some module, an attacker with the access permission may exploit the vulnerability to obtain some information.
SeverityLow
CVSS3.3
Exploit probability—
ProductHuawei Honor 10 Lite Firmware
PublishedNov 13, 2019
First seenNov 13, 2019
How to fix
Update
- huawei honor_10_lite_firmware9.1.0.217\(c00e215r3p1\) or later
- huawei honor_8a_firmware9.1.0.205\(c00e97r1p9\) or later
- huawei huawei_y6_firmware9.1.0.205\(c00e97r2p2\) or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| huawei honor_10_lite_firmware | v < 9.1.0.217\(c00e215r3p1\) | 9.1.0.217\(c00e215r3p1\) |
| huawei honor_8a_firmware | v < 9.1.0.205\(c00e97r1p9\) | 9.1.0.205\(c00e97r1p9\) |
| huawei huawei_y6_firmware | v < 9.1.0.205\(c00e97r2p2\) | 9.1.0.205\(c00e97r2p2\) |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.