Vulnerability Details CVE-2019-5245
HiSuite 9.1.0.300 versions and earlier contains a DLL hijacking vulnerability. This vulnerability exists due to some DLL file is loaded by HiSuite improperly. And it allows an attacker to load this DLL file of the attacker's choosing that could execute arbitrary code.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.0
EPSS Ranking 5.9%
CVSS Severity
CVSS v3 Score 5.3
CVSS v2 Score 4.6
References
Products affected by CVE-2019-5245
-
cpe:2.3:a:huawei:hisuite:-
-
cpe:2.3:a:huawei:hisuite:2.3.15
-
cpe:2.3:a:huawei:hisuite:2.3.28
-
cpe:2.3:a:huawei:hisuite:2.3.35
-
cpe:2.3:a:huawei:hisuite:2.3.42
-
cpe:2.3:a:huawei:hisuite:2.3.50
-
cpe:2.3:a:huawei:hisuite:2.3.55
-
cpe:2.3:a:huawei:hisuite:2.3.55.1
-
cpe:2.3:a:huawei:hisuite:4.0.3.301
-
cpe:2.3:a:huawei:hisuite:4.0.5.300_ove
-
cpe:2.3:a:huawei:hisuite:9.1.0.300