CVE-2019-5307

Some Huawei 4G LTE devices, P30 versions before ELE-AL00 9.1.0.162(C01E160R1P12/C01E160R2P1) and P30 Pro versions before VOG-AL00 9.1.0.162(C01E160R1P12/C01E160R2P1), are exposed to a message replay vulnerability. For the sake of better compatibility, these devices implement a less strict check on the NAS message sequence number (SN), specifically NAS COUNT. As a result, an attacker can construct a rogue base station and replay the GUTI reallocation command message in certain conditions to tamper with GUTIs, or replay the Identity request message to obtain IMSIs. (Vulnerability ID: HWPSIRT-2019-04107)

• CWE-294

• https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190529-01-replay-enVendor Advisory
• https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190529-01-replay-enVendor Advisory

Published

Jun 4, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-5301Huawei smart phones Honor V20 with the versions before 9.0.1…
• CVE-2019-5302There are two denial of service vulnerabilities on some Huaw…5.3
• CVE-2019-5303There are two denial of service vulnerabilities on some Huaw…5.3
• CVE-2019-5304Some Huawei products have a buffer error vulnerability. An u…7.5
• CVE-2019-5305The image processing module of some Huawei Mate 10 smartphon…
• CVE-2019-5306There is a Factory Reset Protection (FRP) bypass security vu…
• CVE-2019-5308Mate 20 RS smartphones with versions earlier than 9.1.0.135(…2.4
• CVE-2019-5309Honor play smartphones with versions earlier than 9.1.0.333(…4.6
• CVE-2019-5310YUNUCMS 1.1.8 has XSS in app/admin/controller/System.php bec…
• CVE-2019-5311An issue was discovered in YUNUCMS V1.1.8. app/index/control…
• CVE-2019-5312An issue was discovered in weixin-java-tools v3.3.0. There i…9.8
• CVE-2019-5313Rejected reason: CVE was unused by HPE.