CVE-2019-5251
Last modified
CVE-2019-5251 is a medium-severity vulnerability rated 5.5/10 on the CVSS scale. There is a path traversal vulnerability in several Huawei smartphones. The system does not sufficiently validate certain pathnames from the application. EPSS estimates a 0.84% chance of exploitation in the next 30 days.
Description
There is a path traversal vulnerability in several Huawei smartphones. The system does not sufficiently validate certain pathnames from the application. An attacker could trick the user into installing, backing up and restoring a malicious application. Successful exploit could cause information disclosure.
Metrics
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Huawei | Honor V10 Firmware | < 9.1.0.333\(c00e333r2p1t8\) |
| Huawei | P30 Firmware | < 9.1.0.226\(c00e220r2p1\) |
| Huawei | Enjoy 7s Firmware | < 9.1.0.130\(c00e115r2p8t8\) |
| Huawei | Mate 20 Firmware | < 9.1.0.139\(c00e133r3p1\) |
| Huawei | Honor 9 Lite Firmware | < 9.1.0.143\(c636e5r1p5t8\) |
| Huawei | Honor 9i Firmware | < 9.1.0.120\(c00e113r1p6t8\) |
| Huawei | M6 Firmware | < 9.1.1.150\(c00e150r1p150\) |
| Huawei | P30 Pro Firmware | < 9.1.0.226\(c00e210r2p1\) |
| Huawei | Honor 20s Firmware | < 9.1.1.132\(c00e131r6p1\) |
| Huawei | Honor 9 Lite Firmware | < 9.1.0.130\(c00e112r2p10t8\) |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2019-5251?
How severe is CVE-2019-5251?
How do I fix CVE-2019-5251?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2019
- CVE-2019-5244Mate 9 Pro Huawei smartphones earlier than LON-L29C 8.0.0.36…
- CVE-2019-5245HiSuite 9.1.0.300 versions and earlier contains a DLL hijack…
- CVE-2019-5246Smartphones with software of ELLE-AL00B 9.1.0.109(C00E106R1P…6.2
- CVE-2019-5247Huawei Atlas 300, Atlas 500 have a buffer overflow vulnerabi…5.5
- CVE-2019-5248CloudEngine 12800 has a DoS vulnerability. An attacker of a …7.4
- CVE-2019-5250Mate 20 Pro smartphones with versions earlier than 9.1.0.135…7.8
- CVE-2019-5252There is an improper authentication vulnerability in Huawei …3.5
- CVE-2019-5253E5572-855 with versions earlier than 8.0.1.3(H335SP1C233) ha…5.9
- CVE-2019-5254Certain Huawei products (AP2000;IPS Module;NGFW Module;NIP63…8.6
- CVE-2019-5255Certain Huawei products (AP2000;IPS Module;NGFW Module;NIP63…5.5
- CVE-2019-5256Certain Huawei products (AP2000;IPS Module;NGFW Module;NIP63…5.5
- CVE-2019-5257Certain Huawei products (AP2000;IPS Module;NGFW Module;NIP63…5.5
Are you affected by CVE-2019-5251?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST