What is CVE-2019-5245?

CVE-2019-5245 is a medium-severity vulnerability in Huawei Hisuite, classified under Uncontrolled Search Path Element. CVSS score: 5.3/10. Published 2019-06-13.

How severe is CVE-2019-5245?

Medium severity. CVSS v3 base score is 5.3 out of 10.

Vulnerability in Huawei Hisuite

CVE-2019-5245

HiSuite 9.1.0.300 versions and earlier contains a DLL hijacking vulnerability. This vulnerability exists due to some DLL file is loaded by HiSuite improperly. And it allows an attacker to load this DLL file of the attacker's choosing that…

EPSS: 0.004 (30.9th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.3 (Medium). Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L.

Affected products

Huawei Hisuite
N/a Hisuite — versions Earlier than HiSuite 9.1.0.300 versions

Weakness classification (CWE)

CWE-427 — Uncontrolled Search Path Element

References

psirt@huawei.com (x_refsource_MISC, Vendor Advisory)

Frequently asked questions

What is CVE-2019-5245?: CVE-2019-5245 is a medium-severity vulnerability in Huawei Hisuite, classified under Uncontrolled Search Path Element. CVSS score: 5.3/10. Published 2019-06-13.
How severe is CVE-2019-5245?: Medium severity. CVSS v3 base score is 5.3 out of 10.