Improper input validation in Huawei M5 Lite 10
CVE-2019-19398
M5 lite 10 with versions of 8.0.0.182(C00) have an insufficient input validation vulnerability. Due to the input validation logic is incorrect, an attacker can exploit this vulnerability to modify the memory of the device by doing a series of operations. Successful exploit may lead to malicious code execution.
Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)
EPSS: 0.014 (70.3th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 9.8 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.
Affected products
- Huawei M5 Lite 10 — versions 8.0.0.182(C00)
- Huawei M5_lite_10
- Huawei M5_lite_10_firmware — versions 8.0.0.182\(c00\)
Weakness classification (CWE)
References
- psirt@huawei.com (x_refsource_CONFIRM, Vendor Advisory)
Frequently asked questions
- What is CVE-2019-19398?
- CVE-2019-19398 is a critical-severity vulnerability in Huawei M5 Lite 10, classified under Improper Input Validation. CVSS score: 9.8/10. Published 2019-12-26.
- How severe is CVE-2019-19398?
- Critical severity. CVSS v3 base score is 9.8 out of 10.