Risk | Low |
Patch available | YES |
Number of vulnerabilities | 1 |
CVE-ID | CVE-2019-5231 |
CWE-ID | CWE-285 |
Exploitation vector | Local |
Public exploit | Public exploit code for vulnerability #1 is available. |
Vulnerable software Subscribe |
P30 Client/Desktop applications / Multimedia software |
Vendor | Huawei |
Security Bulletin
This security bulletin contains one low risk vulnerability.
EUVDB-ID: #VU21448
Risk: Low
CVSSv3.1: 4.3 [CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:F/RL:O/RC:C]
CVE-ID: CVE-2019-5231
CWE-ID:
CWE-285 - Improper Authorization
Exploit availability: No
DescriptionInstall updates from vendor's website.
Vulnerable software versionsP30: before 9.1.0.186
External linkshttp://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190930-01-smartphone-en
Q & A
Can this vulnerability be exploited remotely?
No. The attacker should have physical access to the system in order to successfully exploit this vulnerability.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability. However, a fully functional exploit for this vulnerability is available.