Details of VAR-201911-0262

ID

VAR-201911-0262

CVE

CVE-2019-5279

TITLE

Huawei Emily-L29C Information Disclosure Vulnerability

Trust: 1.2

sources: CNVD: CNVD-2019-41257 // CNNVD: CNNVD-201910-1818

DESCRIPTION

Huawei smart phones Emily-L29C with Versions earlier than 9.1.0.311(C10E2R1P13T8), Versions earlier than 9.1.0.311(C461E2R1P11T8), Versions earlier than 9.1.0.316(C635E2R1P11T8), Versions earlier than 9.1.0.311(C185E2R1P12T8), Versions earlier than 9.1.0.311(C605E2R1P12T8), Versions earlier than 9.1.0.311(C636E7R1P13T8) have an information leakage vulnerability. An attacker tricks the user into installing a malicious application, which can copy specific files to the sdcard, resulting in information leakage. Huawei smartphone Emily-L29C Contains an information disclosure vulnerability.Information may be obtained. Huawei Emily-L29C is a smartphone from China's Huawei company. The vulnerability stems from errors in the configuration of the network system or product during operation

Trust: 2.16

sources: NVD: CVE-2019-5279 // JVNDB: JVNDB-2019-012016 // CNVD: CNVD-2019-41257

IOT TAXONOMY

category:

['IoT']

sub_category:

Trust: 0.6

sources: CNVD: CNVD-2019-41257

AFFECTED PRODUCTS

vendor:	huawei	model:	emily-l29c <9.1.0.311	scope:	-	version:	-	Trust: 3.0
vendor:	huawei	model:	emily-l29c	scope:	lt	version:	9.1.0.311\(c636e7r1p13t8\)	Trust: 1.0
vendor:	huawei	model:	emily-l29c	scope:	lt	version:	9.1.0.316\(c635e2r1p11t8\)	Trust: 1.0
vendor:	huawei	model:	emily-l29c	scope:	lt	version:	9.1.0.311\(c10e2r1p13t8\)	Trust: 1.0
vendor:	huawei	model:	emily-l29c	scope:	lt	version:	9.1.0.311\(c461e2r1p11t8\)	Trust: 1.0
vendor:	huawei	model:	emily-l29c	scope:	lt	version:	9.1.0.311\(c185e2r1p12t8\)	Trust: 1.0
vendor:	huawei	model:	emily-l29c	scope:	lt	version:	9.1.0.311\(c605e2r1p12t8\)	Trust: 1.0
vendor:	huawei	model:	emily-l29c	scope:	lt	version:	9.1.0.311(c10e2r1p13t8)	Trust: 0.8
vendor:	huawei	model:	emily-l29c	scope:	lt	version:	9.1.0.311(c185e2r1p12t8)	Trust: 0.8
vendor:	huawei	model:	emily-l29c	scope:	lt	version:	9.1.0.311(c461e2r1p11t8)	Trust: 0.8
vendor:	huawei	model:	emily-l29c	scope:	lt	version:	9.1.0.311(c605e2r1p12t8)	Trust: 0.8
vendor:	huawei	model:	emily-l29c	scope:	lt	version:	9.1.0.311(c636e7r1p13t8)	Trust: 0.8
vendor:	huawei	model:	emily-l29c	scope:	lt	version:	9.1.0.316(c635e2r1p11t8)	Trust: 0.8
vendor:	huawei	model:	emily-l29c <9.1.0.316	scope:	-	version:	-	Trust: 0.6

sources: CNVD: CNVD-2019-41257 // JVNDB: JVNDB-2019-012016 // NVD: CVE-2019-5279

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov:	CVE-2019-5279
value:	MEDIUM
Trust: 1.0
NVD:	CVE-2019-5279
value:	MEDIUM
Trust: 0.8
CNVD:	CNVD-2019-41257
value:	MEDIUM
Trust: 0.6
CNNVD:	CNNVD-201910-1818
value:	MEDIUM
Trust: 0.6

nvd@nist.gov:	CVE-2019-5279
severity:	MEDIUM
baseScore:	4.3
vectorString:	AV:N/AC:M/AU:N/C:P/I:N/A:N
accessVector:	NETWORK
accessComplexity:	MEDIUM
authentication:	NONE
confidentialityImpact:	PARTIAL
integrityImpact:	NONE
availabilityImpact:	NONE
exploitabilityScore:	8.6
impactScore:	2.9
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 1.8
CNVD:	CNVD-2019-41257
severity:	MEDIUM
baseScore:	5.0
vectorString:	AV:N/AC:L/AU:N/C:P/I:N/A:N
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	PARTIAL
integrityImpact:	NONE
availabilityImpact:	NONE
exploitabilityScore:	10.0
impactScore:	2.9
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.6

nvd@nist.gov:	CVE-2019-5279
baseSeverity:	MEDIUM
baseScore:	5.5
vectorString:	CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
attackVector:	LOCAL
attackComplexity:	LOW
privilegesRequired:	NONE
userInteraction:	REQUIRED
scope:	UNCHANGED
confidentialityImpact:	HIGH
integrityImpact:	NONE
availabilityImpact:	NONE
exploitabilityScore:	1.8
impactScore:	3.6
version:	3.1
Trust: 1.0
NVD:	CVE-2019-5279
baseSeverity:	MEDIUM
baseScore:	5.5
vectorString:	CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
attackVector:	LOCAL
attackComplexity:	LOW
privilegesRequired:	NONE
userInteraction:	REQUIRED
scope:	UNCHANGED
confidentialityImpact:	HIGH
integrityImpact:	NONE
availabilityImpact:	NONE
exploitabilityScore:	NONE
impactScore:	NONE
version:	3.0
Trust: 0.8

sources: CNVD: CNVD-2019-41257 // JVNDB: JVNDB-2019-012016 // CNNVD: CNNVD-201910-1818 // NVD: CVE-2019-5279

PROBLEMTYPE DATA

problemtype:	NVD-CWE-noinfo	Trust: 1.0
problemtype:	CWE-200	Trust: 0.8

sources: JVNDB: JVNDB-2019-012016 // NVD: CVE-2019-5279

THREAT TYPE

local

Trust: 0.6

sources: CNNVD: CNNVD-201910-1818

TYPE

information disclosure

Trust: 0.6

sources: CNNVD: CNNVD-201910-1818

CONFIGURATIONS

sources: JVNDB: JVNDB-2019-012016

PATCH

title:	huawei-sa-20191030-02-smartphone	url:	http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20191030-02-smartphone-en	Trust: 0.8
title:	Patch for Huawei Emily-L29C Information Disclosure Vulnerability	url:	https://www.cnvd.org.cn/patchInfo/show/190781	Trust: 0.6
title:	Huawei Emily-L29C Repair measures for information disclosure vulnerabilities	url:	http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=103036	Trust: 0.6

sources: CNVD: CNVD-2019-41257 // JVNDB: JVNDB-2019-012016 // CNNVD: CNNVD-201910-1818

EXTERNAL IDS

db:	NVD	id:	CVE-2019-5279	Trust: 3.0
db:	JVNDB	id:	JVNDB-2019-012016	Trust: 0.8
db:	CNVD	id:	CNVD-2019-41257	Trust: 0.6
db:	CNNVD	id:	CNNVD-201910-1818	Trust: 0.6

sources: CNVD: CNVD-2019-41257 // JVNDB: JVNDB-2019-012016 // CNNVD: CNNVD-201910-1818 // NVD: CVE-2019-5279

REFERENCES

url:	http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20191030-02-smartphone-en	Trust: 1.6
url:	https://nvd.nist.gov/vuln/detail/cve-2019-5279	Trust: 1.4
url:	https://www.huawei.com/cn/psirt/security-advisories/huawei-sa-20191030-02-smartphone-cn	Trust: 1.2
url:	https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-5279	Trust: 0.8

sources: CNVD: CNVD-2019-41257 // JVNDB: JVNDB-2019-012016 // CNNVD: CNNVD-201910-1818 // NVD: CVE-2019-5279

SOURCES

db:	CNVD	id:	CNVD-2019-41257
db:	JVNDB	id:	JVNDB-2019-012016
db:	CNNVD	id:	CNNVD-201910-1818
db:	NVD	id:	CVE-2019-5279

LAST UPDATE DATE

2024-11-23T22:55:21.751000+00:00

SOURCES UPDATE DATE

db:	CNVD	id:	CNVD-2019-41257	date:	2019-11-19T00:00:00
db:	JVNDB	id:	JVNDB-2019-012016	date:	2019-11-22T00:00:00
db:	CNNVD	id:	CNNVD-201910-1818	date:	2020-08-25T00:00:00
db:	NVD	id:	CVE-2019-5279	date:	2024-11-21T04:44:39.650

SOURCES RELEASE DATE

db:	CNVD	id:	CNVD-2019-41257	date:	2019-11-19T00:00:00
db:	JVNDB	id:	JVNDB-2019-012016	date:	2019-11-22T00:00:00
db:	CNNVD	id:	CNNVD-201910-1818	date:	2019-10-30T00:00:00
db:	NVD	id:	CVE-2019-5279	date:	2019-11-13T14:15:10.397