CVEvulnerability

CVE-2019-5218

8.8 HIGH Published 2019-11-29 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2019-11-29
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
8.8 HIGH — CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
5.8 MEDIUM — AV:A/AC:L/Au:N/C:P/I:P/A:P
Weaknesses
CWE-287

Description

There is an insufficient authentication vulnerability in Huawei Band 2 and Honor Band 3. The band does not sufficiently authenticate the device try to connect to it in certain scenario. Successful exploit could allow the attacker to spoof then connect to the band.

Affected configurations

• huawei band 2 firmware (< eris-b19\/eris-b29 1.2.53) • huawei band 3 firmware (< nyx-b10hn 1.5.53)

Related

Weakness · CWE (1)

  • CWE-287 Improper Authentication weakness

References