CVE-2019-5299
High
Description
Huawei mobile phones Hima-AL00Bhave with Versions earlier than HMA-AL00C00B175 have a signature verification bypass vulnerability. Attackers can induce users to install malicious applications. Due to a defect in the signature verification logic, the malicious applications can invoke specific interface to execute malicious code. A successful exploit may result in the execution of arbitrary code.
SeverityHigh
CVSS7.8
Exploit probability—
ProductHuawei Hima-al00b Firmware
PublishedAug 13, 2019
First seenAug 13, 2019
How to fix
Update
- huawei hima-al00b_firmwarehma-al00c00b175 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| huawei hima-al00b_firmware | v < hma-al00c00b175 | hma-al00c00b175 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.