-
CVE-2019-5221: Path Traversal rende vulnerabile il sistema durante l'utilizzo di Huawei Share
Gravità
Media
Impatto
Tramite questi attacchi potrebbero creare un percorso di file sul telefono di un utente e deviare i file trasferiti su Huawei Share sul percorso.
Prodotti interessati
Mate 20, Mate 20 Pro, P30, P30 Pro, Mate10, mate10 pro, Mate RS, Honor magic 2
Versioni fisse
Laya-L29C 9.1.0.300(C605E10R1P16); Laya-L09C 9.1.0.300(C605E10R1P16); Laya-L29C 9.1.0.300(C636E10R2P1); Laya-L29C 9.1.0.300(C185E10R1P16); Laya-L09C 9.1.0.300(C185E10R2P1); Laya-L09C 9.1.0.300(C316E13R1P16); Laya-L29C 9.1.0.300(C301E15R2P1); Laya-L29C 9.1.0.300(C461E10R1P16); Laya-L29C 9.1.0.301(C432E10R1P16); Laya-L09C 9.1.0.300(C432E10R1P16); Laya-L09C 9.1.0.300(C346E12R1P16); Laya-L29C 9.1.0.300(C10E10R2P1); Laya-L29C 9.1.0.310(C675E17R1P17); Laya-L29C 9.1.0.310(C635E12R1P16); Laya-AL00EP 9.1.0.135(C786E200R2P1); Hima-L09CA 9.1.0.300(C432E10R1P16); Hima-TL00B 9.1.0.135(C01E200R2P1); Hima-AL00B 9.1.0.135(C00E200R2P1); ALP-TL00B 9.1.0.321(C01E320R1P1T8); ALP-L29 9.1.0.300(C636E2R1P12T8); ALP-L29 9.1.0.300(C605E2R1P11T8); ALP-L29 9.1.0.300(C185E2R1P12T8); ALP-L09 9.1.0.300(C432E4R1P9T8); BLA-TL00B 9.1.0.321(C01E320R1P1T8); BLA-L09C 9.1.0.300(C432E4R1P11T8); BLA-L29C 9.1.0.302(C635E4R1P13T8); BLA-AL00B 9.1.0.312(SP1C00E312R2P1T8); BLA-L29C 9.1.0.300(C185E2R1P13T8); BLA-L29C 9.1.0.300(C10E2R1P13T8); BLA-L09C 9.1.0.300(C316E5R1P11T8); BLA-L29C 9.1.0.300(C432E4R1P11T8); BLA-L29C 9.1.0.300(C636E2R1P13T8); BLA-L09C 9.1.0.300(C605E2R1P12T8); BLA-L09C 9.1.0.300(C185E2R1P13T8); NEO-AL00 9.1.0.321(C786E320R1P1T8); ELLE-AL00B 9.1.0.175(C00E170R2P1); VOGUE-AL00A 9.1.0.175(C00E170R2P1); Tony-AL00B 9.1.0.216(C00E214R2P1); Tony-TL00B 9.1.0.226(C01E222R2P1);
-
CVE-2019-5215: Man-in-the-Middle (MITM) rende vulnerabile il sistema durante l'utilizzo di Huawei Share
Gravità
Media
Impatto
Tramite questi attacchi potrebbero ottenere segretamente e alterare le comunicazioni tra due parti che utilizzano Huawei Share.
Prodotti interessati
Mate 20, Mate 20 Pro, P30, P30 Pro, Mate10, mate10 pro, Mate RS, Honor magic 2
Versioni fisse
Laya-L29C 9.1.0.300(C605E10R1P16); Laya-L09C 9.1.0.300(C605E10R1P16); Laya-L29C 9.1.0.300(C636E10R2P1); Laya-L29C 9.1.0.300(C185E10R1P16); Laya-L09C 9.1.0.300(C185E10R2P1); Laya-L09C 9.1.0.300(C316E13R1P16); Laya-L29C 9.1.0.300(C301E15R2P1); Laya-L29C 9.1.0.300(C461E10R1P16); Laya-L29C 9.1.0.301(C432E10R1P16); Laya-L09C 9.1.0.300(C432E10R1P16); Laya-L09C 9.1.0.300(C346E12R1P16); Laya-L29C 9.1.0.300(C10E10R2P1); Laya-L29C 9.1.0.310(C675E17R1P17); Laya-L29C 9.1.0.310(C635E12R1P16); Laya-AL00EP 9.1.0.135(C786E200R2P1); Hima-L09CA 9.1.0.300(C432E10R1P16); Hima-TL00B 9.1.0.135(C01E200R2P1); Hima-AL00B 9.1.0.135(C00E200R2P1); ALP-TL00B 9.1.0.321(C01E320R1P1T8); ALP-L29 9.1.0.300(C636E2R1P12T8); ALP-L29 9.1.0.300(C605E2R1P11T8); ALP-L29 9.1.0.300(C185E2R1P12T8); ALP-L09 9.1.0.300(C432E4R1P9T8); BLA-TL00B 9.1.0.321(C01E320R1P1T8); BLA-L09C 9.1.0.300(C432E4R1P11T8); BLA-L29C 9.1.0.302(C635E4R1P13T8); BLA-AL00B 9.1.0.312(SP1C00E312R2P1T8); BLA-L29C 9.1.0.300(C185E2R1P13T8); BLA-L29C 9.1.0.300(C10E2R1P13T8); BLA-L09C 9.1.0.300(C316E5R1P11T8); BLA-L29C 9.1.0.300(C432E4R1P11T8); BLA-L29C 9.1.0.300(C636E2R1P13T8); BLA-L09C 9.1.0.300(C605E2R1P12T8); BLA-L09C 9.1.0.300(C185E2R1P13T8); NEO-AL00 9.1.0.321(C786E320R1P1T8); ELLE-AL00B 9.1.0.175(C00E170R2P1); VOGUE-AL00A 9.1.0.175(C00E170R2P1); Tony-AL00B 9.1.0.216(C00E214R2P1); Tony-TL00B 9.1.0.226(C01E222R2P1);
-
CVE-2019-5297：Vulnerabilità del bypass FRP su alcuni smartphone Huawei
Gravità
Media
Impatto
Gli hacker possono bypassare la funzione FRP e ottenere accesso all\'utilizzo dello smartphone.
Prodotti interessati
Mate 10,Mate 10 Pro,P20,P20 Plus,Mate RS
Versioni fisse
ALP-L09 9.0.0.159(C432E4R1P9T8); ALP-L29 9.0.0.159(C185E2R1P12T8); ALP-L29 9.0.0.159(C605E2R1P11T8); ALP-L29 9.0.0.159(C636E2R1P12T8); BLA-A09 9.0.0.201(C567E6R1P11T8); BLA-L09C 9.0.0.159(C185E2R1P13T8); BLA-L09C 9.0.0.160(C605E2R1P12T8); BLA-L09C 9.0.0.161(C432E4R1P11T8); BLA-L29C 9.0.0.159(C10E2R1P13T8); BLA-L29C 9.0.0.159(C185E2R1P13T8); BLA-L29C 9.0.0.159(C636E2R1P13T8); BLA-L29C 9.0.0.160(C605E2R1P12T8); BLA-L29C 9.0.0.161(C432E4R1P11T8); BLA-L29C 9.0.0.196(C635E4R1P13T8); BLA-L29D 9.0.0.159(C721E4R1P11T8); Emily-L09C 9.0.0.159(C185E2R1P12T8); Emily-L09C 9.0.0.160(C432E7R1P11T8); Emily-L09C 9.0.0.161(C605E2R1P11T8); Emily-L29C 9.0.0.159(C185E2R1P12T8); Emily-L29C 9.0.0.160(C432E7R1P11T8); Emily-L29C 9.0.0.161(C10E2R1P11T8); Emily-L29C 9.0.0.161(C605E2R1P12T8); Emily-L29C 9.0.0.168(C636E7R1P13T8); Emily-L29C 9.0.0.205(C635E2R1P11); Charlotte-L09C 9.0.0.159(C185E4R1P11T8); Charlotte-L09C 9.0.0.161(C605E2R1P9T8); Charlotte-L09C 9.0.0.163(C432E5R1P9T8); Charlotte-L29C 9.0.0.159(C185E4R1P11T8); Charlotte-L29C 9.0.0.161(C10E2R1P9T8); Charlotte-L29C 9.0.0.161(C605E2R1P11T8); Charlotte-L29C 9.0.0.163(C432E5R1P9T8); Charlotte-L29C 9.0.0.168(C636E2R1P12T8); Charlotte-L0I 9.0.0.159(C675E4R1P12T8); NEO-L29D 9.0.0.159(C721E5R1P9T8)
-
CVE-2019-5282：Vulnerabilità di tipo double free sul modulo Bastet di alcuni smartphone Huawei
Gravità
Media
Impatto
Uno sfruttamento efficace delle vulnerabilità potrebbe causare l\'esecuzione di codice nocivo.
Prodotti interessati
P20,Mate 50
Versioni fisse
Emily-L09C 9.0.0.203(C432E7R1P11); Emily-L29C 9.0.0.203(C432E7R1P11); Emily-L29C 9.0.0.202(C185E2R1P12); Emily-L29C 9.0.0.207(C636E7R1P13); Emily-L29C 9.0.0.205(C635E2R1P11); Emily-AL00A 9.0.0.182(C00E82R1P21); Emily-TL00B 9.0.0.182(C01E82R1P21); Hima-L09CA 9.0.0.198(C432E10R1P16); Hima-L29CA 9.0.0.198(C432E10R1P16); Hima-L29C 9.0.0.204(C636E10R2P1)
-
CVE-2018-7961: Vulnerabilità di sicurezza relative ai codici di verifica Smart SMS sui dispositivi Huawei
Gravità
Media
Impatto
Le informazioni sulla privacy dei dispositivi Huawei potrebbero essere divulgate a causa delle vulnerabilità della sicurezza.
Prodotti interessati
Mate 10,Mate 10 Pro,P20,P20 Plus,Mate RS,Mate 20,Mate20 pro,Mate20 X
Versioni fisse
ALP-AL00B 9.0.0.125(C00E81R2P20T8); ALP-TL00B 9.0.0.125(C01E81R1P20T8); BLA-AL00B 9.0.0.125(C00E83R2P15T8); BLA-TL00B 9.0.0.125(C01E83R1P15T8); Emily-AL00A 9.0.0.125(C00E76R1P21T8); Emily-TL00B 9.0.0.125(C01E76R1P21T8); ALP-AL00B 9.0.0.125(C00E81R2P20T8); ALP-L09 9.0.0.159(C432E4R1P9T8); ALP-L29 9.0.0.159(C185E2R1P12T8); ALP-L29 9.0.0.159(C605E2R1P11T8); ALP-L29 9.0.0.159(C636E2R1P12T8); ALP-TL00B 9.0.0.125(C01E81R1P20T8); BLA-A09 9.0.0.201(C567E6R1P11T8); BLA-AL00B 9.0.0.125(C00E83R2P15T8); BLA-L09C 9.0.0.159(C185E2R1P13T8); BLA-L09C 9.0.0.160(C605E2R1P12T8); BLA-L09C 9.0.0.161(C432E4R1P11T8); BLA-L29C 9.0.0.159(C10E2R1P13T8); BLA-L29C 9.0.0.159(C185E2R1P13T8); BLA-L29C 9.0.0.159(C636E2R1P13T8); BLA-L29C 9.0.0.160(C605E2R1P12T8); BLA-L29C 9.0.0.161(C432E4R1P11T8); BLA-L29C 9.0.0.196(C635E4R1P13T8); BLA-L29D 9.0.0.159(C721E4R1P11T8); BLA-TL00B 9.0.0.125(C01E83R1P15T8); Charlotte-AL01B 9.0.0.125(C00E51R1P15T8); Charlotte-L09C 9.0.0.159(C185E4R1P11T8); Charlotte-L09C 9.0.0.161(C605E2R1P9T8); Charlotte-L09C 9.0.0.163(C432E5R1P9T8); Charlotte-L0I 9.0.0.159(C675E4R1P12T8); Charlotte-L29C 9.0.0.159(C185E4R1P11T8); Charlotte-L29C 9.0.0.161(C10E2R1P9T8); Charlotte-L29C 9.0.0.161(C605E2R1P11T8); Charlotte-L29C 9.0.0.163(C432E5R1P9T8); Charlotte-L29C 9.0.0.168(C636E2R1P12T8); Charlotte-TL01B 9.0.0.125(C01E51R1P15T8); Emily-AL00A 9.0.0.125(C00E76R1P21T8); Emily-L09C 9.0.0.159(C185E2R1P12T8); Emily-L09C 9.0.0.160(C432E7R1P11T8); Emily-L09C 9.0.0.161(C605E2R1P11T8); Emily-L29C 9.0.0.159(C185E2R1P12T8); Emily-L29C 9.0.0.160(C432E7R1P11T8); Emily-L29C 9.0.0.161(C10E2R1P11T8); Emily-L29C 9.0.0.161(C605E2R1P12T8); Emily-L29C 9.0.0.168(C636E7R1P13T8); Emily-L29C 9.0.0.205(C635E2R1P11); Emily-TL00B 9.0.0.125(C01E76R1P21T8); NEO-AL00 9.0.0.125(C786E81R1P13T8); NEO-L29D 9.0.0.159(C721E5R1P9T8); Hima-AL00B 9.0.0.136(C00E130R1P21); Hima-TL00B 9.0.0.136(C01E135R1P21); Hima-L29CA 9.0.0.126(C605E10R1P16); Laya-AL00C 9.0.0.137(C00E130R1P20); Laya-AL00EP 9.0.0.137(C786E135R1P20); Laya-L09C 9.0.0.126(C605E10R1P16); Laya-L09C 9.0.0.126(C185E10R1P16); Laya-L29C 9.0.0.128(C635E12R1P16); Laya-L29C 9.0.0.126(C636E10R1P17); Laya-L29C 9.0.0.126(C605E10R1P16); Laya-L29C 9.0.0.126(C185E10R1P16); Laya-L29C 9.0.0.126(C10E10R1P18); Laya-L29C 9.0.0.126(C10E10R1P18); Laya-TL00C 9.0.0.137(C01E135R1P20); Ever-AL00B-CUST 9.0.0.130(C00); Ever-L29B 9.0.0.132(C432E3R1P12); Ever-L29B 9.0.0.127(C636E3R1P11); Ever-TL00B-CUST 9.0.0.135(C01)