CVE-2019-5212

MEDIUM

Huawei P20 Firmware emily-l29c_9.1.0.311(c10e2r1p13t8) - Information Disclosure via Huawei Share

Title source: llm
STIX 2.1

Description

There is an improper access control vulnerability in Huawei Share. The software does not properly restrict access to certain file from certain application. An attacker tricks the user into installing a malicious application then establishing a connect to the attacker through Huawei Share, successful exploit could cause information disclosure.

References (1)

Core 1
Core References

Scores

CVSS v3 5.5
EPSS 0.0053
EPSS Percentile 40.3%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Details

CWE
CWE-732
Status published
Products (1)
huawei/p20_firmware < emily-l29c_9.1.0.311\(c10e2r1p13t8\)
Published Nov 29, 2019
Tracked Since Feb 18, 2026