Search/CVE-2019-5302
● CVE — Medium

CVE-2019-5302

VendorhuaweiProductberkeley-al20 firmware, alp-al00b firmware, alp-l09 firmware, bla-l29c firmware, mate 20 firmware, p20 firmware, y9 2019 firmware, p30 firmware, p30 pro firmware, emily-l29c firmware, mate 20 x firmware, p20 pro firmware, emily-l09c firmware, mate 20 rs firmware, mate 20 pro firmware, columbia-al10b firmware, columbia-l29d firmware, ever-l29b firmware, nova lite 3 firmware, alp-l29 firmware, berkeley-l09 firmware, charlotte-l09c firmware, charlotte-l29c firmware, cornell-al00a firmware, cornell-l29a firmwareDiscoveredApr 27, 2020UpdatedNov 21, 2024

There are two denial of service vulnerabilities on some Huawei smartphones. An attacker may send specially crafted TD-SCDMA messages from a rogue base station to the affected devices. Due to insufficient input validation of two values when parsing the messages, successful exploit may cause device abnormal. This is 1 out of 2 vulnerabilities. Different than CVE-2020-5303. Affected products are: ALP-AL00B: earlier than 9.1.0.333(C00E333R2P1T8) ALP-L09: earlier than 9.1.0.300(C432E4R1P9T8) ALP-L29: earlier than 9.1.0.315(C636E5R1P13T8) BLA-L29C: earlier than 9.1.0.321(C636E4R1P14T8), earlier than 9.1.0.330(C432E6R1P12T8), earlier than 9.1.0.302(C635E4R1P13T8) Berkeley-AL20: earlier than 9.1.0.333(C00E333R2P1T8) Berkeley-L09: earlier than 9.1.0.350(C10E3R1P14T8), earlier than…

View graph Watch Export
CVSS v3.1
5.3 MEDIUM
EPSS
0.32%
probability of exploitation in 30 days
CISA KEV
Not listed
no confirmed exploitation reported
News coverage
0
sources referencing this CVE
Related IOCs
0
seen in the same coverage
CVSS v3.1 Detail
Attack VectorADJACENT
Attack ComplexityHIGH
Privileges RequiredNONE
User InteractionNONE
ScopeUNCHANGED
ConfidentialityNONE
IntegrityNONE
AvailabilityHIGH
CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Connections
26 relationships
Timeline
disclosure → media coverage
Apr 27, 2020
Disclosure — published as a CVE record. · last revised by NVD Nov 21, 2024