CVE-2019-5215

Name of the Vulnerable Software and Affected Versions Huawei P30 smartphones versions prior to ELE-AL00 9.1.0.162(C01E160R1P12/C01E160R2P1) Huawei P30 Pro versions prior to VOG-AL00 9.1.0.162 (C01E160R1P12/C01E160R2P1)

Description The issue allows an attacker to perform a man-in-the-middle (MITM) attack when users establish a connection and transfer data through Huawei Share. This could enable the attacker to sniff, spoof, and intrude the Huawei Share connection, potentially obtaining and tampering with the data.

Recommendations For Huawei P30 smartphones versions prior to ELE-AL00 9.1.0.162(C01E160R1P12/C01E160R2P1), update to version ELE-AL00 9.1.0.162(C01E160R1P12/C01E160R2P1) or later. For Huawei P30 Pro versions prior to VOG-AL00 9.1.0.162 (C01E160R1P12/C01E160R2P1), update to version VOG-AL00 9.1.0.162 (C01E160R1P12/C01E160R2P1) or later. As a temporary workaround, consider disabling Huawei Share until a patch is available.