CVE-2019-5263

Description

HiSuite with 9.1.0.305 and earlier versions and 9.1.0.305(MAC) and earlier versions and HwBackup with earlier versions before 9.1.1.308 have a brute forcing encrypted backup data vulnerability. Huawei smartphone user backup information can be obtained by brute forcing the password for encrypting the backup.

Risk Information

Base Score

5.5

MODERATE

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS Score

Exploitation Probability

0.056

Associated Vulnerability

Vulnerability	OS Platform
Vulnerabilities CVE-2019-5263 are affected in hisuite 9.1.0.305	NCM
Vulnerabilities CVE-2019-5263 are affected in hwbackup 9.1.1.308	NCM
Improper Restriction of Excessive Authentication Attempts Vulnerability (CVE-2019-5263)	NCM

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234