CVE-2019-5212

Description

There is an improper access control vulnerability in Huawei Share. The software does not properly restrict access to certain file from certain application. An attacker tricks the user into installing a malicious application then establishing a connect to the attacker through Huawei Share, successful exploit could cause information disclosure.

Risk Information

Base Score

5.5

MODERATE

Vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

EPSS Score

Exploitation Probability

0.12

Associated Vulnerability

Vulnerability	OS Platform
Vulnerabilities CVE-2018-7987 ,CVE-2019-5211 ,CVE-2019-5212 ,CVE-2019-5283 ,CVE-2019-5306 are affected in p20_firmware 8.1.0.130	NCM
Vulnerabilities CVE-2018-7987 ,CVE-2019-5211 ,CVE-2019-5212 ,CVE-2019-5283 ,CVE-2019-5306 are affected in p20_firmware 8.1.0.128	NCM
Vulnerabilities CVE-2018-7987 ,CVE-2019-5211 ,CVE-2019-5212 ,CVE-2019-5283 ,CVE-2019-5306 are affected in p20_firmware 8.1.0.121	NCM
Vulnerabilities CVE-2018-7987 ,CVE-2019-5211 ,CVE-2019-5212 ,CVE-2019-5283 ,CVE-2019-5306 are affected in p20_firmware 8.1.0.120	NCM
Vulnerabilities CVE-2018-7987 ,CVE-2019-5211 ,CVE-2019-5212 ,CVE-2019-5283 ,CVE-2019-5306 are affected in p20_firmware 8.1.0.109	NCM
Vulnerabilities CVE-2018-7987 ,CVE-2019-5211 ,CVE-2019-5212 ,CVE-2019-5283 ,CVE-2019-5306 are affected in p20_firmware 8.0.1.16(c00)	NCM
Vulnerabilities CVE-2019-5211 ,CVE-2019-5212 are affected in p20_firmware emily-al00a_9.1.0.321(c00e320r1p1t8)	NCM
Vulnerabilities CVE-2019-5211 ,CVE-2019-5212 ,CVE-2019-5283 ,CVE-2019-5306 are affected in p20_firmware emily-al00a_9.0.0.167(c00e81r1p21t8)	NCM
Vulnerabilities CVE-2019-5211 ,CVE-2019-5212 ,CVE-2019-5283 ,CVE-2019-5306 are affected in p20_firmware 10.0.0.156(c00e156r1p4)	NCM
Vulnerabilities CVE-2019-5211 ,CVE-2019-5212 ,CVE-2019-5283 ,CVE-2019-5306 are affected in p20_firmware 9.1.0.333(c00e333r1p1t8)	NCM
Vulnerabilities CVE-2019-5211 ,CVE-2019-5212 ,CVE-2019-5283 ,CVE-2019-5306 are affected in p20_firmware 8.1.0.171(c00)	NCM
Incorrect Permission Assignment for Critical Resource Vulnerability (CVE-2019-5212)	NCM

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234