Vulnerability Details CVE-2019-5221
There is a path traversal vulnerability on Huawei Share. The software does not properly validate the path, an attacker could crafted a file path when transporting file through Huawei Share, successful exploit could allow the attacker to transport a file to arbitrary path on the phone. Affected products: Mate 20 X versions earlier than Ever-L29B 9.1.0.300(C432E3R1P12), versions earlier than Ever-L29B 9.1.0.300(C636E3R2P1), and versions earlier than Ever-L29B 9.1.0.300(C185E3R3P1).
Exploit prediction scoring system (EPSS) score
EPSS Score 0.0
EPSS Ranking 13.6%
CVSS Severity
CVSS v3 Score 6.5
CVSS v2 Score 3.3
References
Products affected by CVE-2019-5221
-
cpe:2.3:h:huawei:mate_20_x:-
-
cpe:2.3:o:huawei:mate_20_x_firmware:-
-
cpe:2.3:o:huawei:mate_20_x_firmware:10.0.0.176(c00e70r2p8)
-
cpe:2.3:o:huawei:mate_20_x_firmware:10.0.0.195(c00e74r2p8)
-
cpe:2.3:o:huawei:mate_20_x_firmware:10.1.0.135(c00e135r2p8)
-
cpe:2.3:o:huawei:mate_20_x_firmware:10.1.0.160(c00e160r2p8)
-
cpe:2.3:o:huawei:mate_20_x_firmware:10.1.0.160(c01e160r2p8)
-
cpe:2.3:o:huawei:mate_20_x_firmware:9.1.0.135(c00e133r2p1)
-
cpe:2.3:o:huawei:mate_20_x_firmware:ever-al00b_9.0.0.200(c00e200r2p1)
-
cpe:2.3:o:huawei:mate_20_x_firmware:ever-l29b_9.1.0.300(c185e3r3p1)
-
cpe:2.3:o:huawei:mate_20_x_firmware:ever-l29b_9.1.0.300(c432e3r1p12)