CVE-2019-5213

Description

Honor play smartphones with versions earlier than Cornell-AL00A 9.1.0.321(C00E320R1P1T8) have an insufficient authentication vulnerability. The system has a logic judge error under certain scenario. Successful exploit could allow the attacker to modify the alarm clock settings after a serious of uncommon operations without unlock the screen lock.

Risk Information

Base Score

2.4

MODERATE

Vector

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

EPSS Score

Exploitation Probability

0.051

Associated Vulnerability

Vulnerability	OS Platform
Vulnerabilities CVE-2019-5213 are affected in honor_play_firmware cornell-al00a_9.0.0.156(c00e156r1p13t8)	NCM
Vulnerabilities CVE-2019-5213 are affected in honor_play_firmware 9.1.0.333(c00e333r1p1t8)	NCM
Improper Authentication Vulnerability (CVE-2019-5213)	NCM

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234