2 lines
4.5 KiB
JSON
2 lines
4.5 KiB
JSON
{"affected":[{"affectedData":[{"product":"Honor V10, Honor 10, Honor Play","vendor":"Huawei","versions":[{"status":"affected","version":"Versions earlier than Berkeley-AL20 9.0.0.156(C00E156R2P14T8)"},{"status":"affected","version":"Versions earlier than Columbia-AL10B 9.0.0.156(C00E156R1P20T8)"},{"status":"affected","version":"Versions earlier than Cornell-AL00A 9.0.0.156(C00E156R1P13T8)"}]}],"source":"psirt@huawei.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:huawei:honor_view_10_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"A52F1C13-42C9-4B49-9F54-A995A14EB442","versionEndExcluding":"berkeley-al20_9.0.0.156\\(c00e156r2p14t8\\)","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:huawei:honor_view_10:-:*:*:*:*:*:*:*","matchCriteriaId":"E788B81C-69DB-4A13-AC70-1E17120CB82E","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:huawei:honor_10_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"95BCC442-4B91-4B1F-B566-279B27C206D4","versionEndExcluding":"columbia-al10b_9.0.0.156\\(c00e156r1p20t8\\)","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:huawei:honor_10:-:*:*:*:*:*:*:*","matchCriteriaId":"6645D5D7-213C-4B3E-B5A6-8987AEFB411D","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:huawei:honor_play_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"F4504500-777C-4C07-AE8D-B7E08BDA7D1B","versionEndExcluding":"cornell-al00a_9.0.0.156\\(c00e156r1p13t8\\)","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:huawei:honor_play:-:*:*:*:*:*:*:*","matchCriteriaId":"9B4BC963-31B0-4731-8D15-3EFD00E463BE","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"}],"cveTags":[],"descriptions":[{"lang":"en","value":"There is a race condition vulnerability on Huawei Honor V10 smartphones versions earlier than Berkeley-AL20 9.0.0.156(C00E156R2P14T8), Honor 10 smartphones versions earlier than Columbia-AL10B 9.0.0.156(C00E156R1P20T8) and Honor Play smartphones versions earlier than Cornell-AL00A 9.0.0.156(C00E156R1P13T8). An attacker tricks the user into installing a malicious application, which makes multiple processes to operate the same variate at the same time. Successful exploit could cause execution of malicious code."},{"lang":"es","value":"Se presenta una vulnerabilidad de condición de carrera en teléfonos inteligentes Honor V10 de Huawei en versiones anteriores a Berkeley-AL20 9.0.0.156 (C00E156R2P14T8), teléfonos inteligentes Honor 10 versiones anteriores a Columbia-AL10B 9.0.0.156 (C00E156R1P20T8) y teléfonos inteligentes Honor Play versiones anteriores a Cornell-AL00A 9.0 .0.156 (C00E156R1P13T8). Un atacante engaña al usuario para instalar una aplicación maliciosa, que permite a múltiples procesos operar la misma variable al mismo tiempo. La explotación con éxito podría causar la ejecución de código malicioso."}],"id":"CVE-2019-5216","lastModified":"2026-06-17T02:37:19.080","metrics":{"cvssMetricV2":[{"acInsufInfo":false,"baseSeverity":"HIGH","cvssData":{"accessComplexity":"HIGH","accessVector":"NETWORK","authentication":"NONE","availabilityImpact":"COMPLETE","baseScore":7.6,"confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","vectorString":"AV:N/AC:H/Au:N/C:C/I:C/A:C","version":"2.0"},"exploitabilityScore":4.9,"impactScore":10.0,"obtainAllPrivilege":false,"obtainOtherPrivilege":false,"obtainUserPrivilege":false,"source":"nvd@nist.gov","type":"Primary","userInteractionRequired":true}],"cvssMetricV30":[{"cvssData":{"attackComplexity":"HIGH","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":7.0,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","version":"3.0"},"exploitabilityScore":1.0,"impactScore":5.9,"source":"nvd@nist.gov","type":"Primary"}]},"published":"2019-06-06T15:29:01.157","references":[{"source":"psirt@huawei.com","tags":["Vendor Advisory"],"url":"http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190116-01-smartphone-en"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"url":"http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190116-01-smartphone-en"}],"sourceIdentifier":"psirt@huawei.com","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"CWE-362"}],"source":"nvd@nist.gov","type":"Primary"}]}
|