Vulnerability Details CVE-2019-5222
There is an information disclosure vulnerability on Secure Input of certain Huawei smartphones in Versions earlier than Tony-AL00B 9.1.0.216(C00E214R2P1). The Secure Input does not properly limit certain system privilege. An attacker tricks the user to install a malicious application and successful exploit could result in information disclosure.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 27.1%
CVSS Severity
CVSS v3 Score 5.5
CVSS v2 Score 4.3
References
Products affected by CVE-2019-5222
-
cpe:2.3:h:huawei:honor_magic_2:-
-
cpe:2.3:o:huawei:honor_magic_2_firmware:10.0.0.187(c00e61r2p11)
-
cpe:2.3:o:huawei:honor_magic_2_firmware:tony-al00b/tony-tl00b_9.0.0.182(c00e180r2p2)