CVE-2019-5252

Published Dec 14, 2019

Last updated 5 years ago

Overview

Description
There is an improper authentication vulnerability in Huawei smartphones (Y9, Honor 8X, Honor 9 Lite, Honor 9i, Y6 Pro). The applock does not perform a sufficient authentication in a rare condition. Successful exploit could allow the attacker to use the application locked by applock in an instant.
Source
psirt@huawei.com
NVD status
Analyzed

Risk scores

CVSS 3.1

Type
Primary
Base score
3.5
Impact score
2.5
Exploitability score
0.9
Vector string
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Severity
LOW

CVSS 2.0

Type
Primary
Base score
3.6
Impact score
4.9
Exploitability score
3.9
Vector string
AV:L/AC:L/Au:N/C:P/I:P/A:N

Weaknesses

nvd@nist.gov
CWE-287

Social media

Hype score
Not currently trending

Configurations