PT-2019-17508
CVE-2019-5215
·
Published
2019-06-04
·
Updated
2020-08-24
Description by
CVSS 3.1
6.8
MediumMetricsAV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Name of the Vulnerable Software and Affected Versions
Huawei P30 smartphones versions prior to ELE-AL00 9.1.0.162(C01E160R1P12/C01E160R2P1)
Huawei P30 Pro versions prior to VOG-AL00 9.1.0.162 (C01E160R1P12/C01E160R2P1)
Description
The issue allows an attacker to perform a man-in-the-middle (MITM) attack when users establish a connection and transfer data through Huawei Share. This could enable the attacker to sniff, spoof, and intrude the Huawei Share connection, potentially obtaining and tampering with the data.
Recommendations
For Huawei P30 smartphones versions prior to ELE-AL00 9.1.0.162(C01E160R1P12/C01E160R2P1), update to version ELE-AL00 9.1.0.162(C01E160R1P12/C01E160R2P1) or later.
For Huawei P30 Pro versions prior to VOG-AL00 9.1.0.162 (C01E160R1P12/C01E160R2P1), update to version VOG-AL00 9.1.0.162 (C01E160R1P12/C01E160R2P1) or later.
As a temporary workaround, consider disabling Huawei Share until a patch is available.
Found an issue in the description? Have something to add? Feel free to write us 👾