CVEvulnerability

CVE-2019-5226

5.5 MEDIUM Published 2019-11-29 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2019-11-29
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
5.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
CVSS 2.0 ([email protected])
4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
Weaknesses
CWE-346

Description

P30, P30 Pro, Mate 20 smartphones with software of versions earlier than ELLE-AL00B 9.1.0.193(C00E190R2P1), versions earlier than VOGUE-AL00A 9.1.0.193(C00E190R2P1), versions earlier than Hima-AL00B 9.1.0.135(C00E133R2P1) and HiSuite with versions earlier than HiSuite 9.1.0.305 have a version downgrade vulnerability. The device and HiSuite software do not validate the upgrade package sufficiently, so that the system of smartphone can be downgraded to an older version.

Affected configurations

• huawei p30 firmware (< elle-al00b 9.1.0.193\(c00e190r2p1\)) • huawei p30 pro firmware (< vogue-al00a 9.1.0.193\(c00e190r2p1\)) • huawei mate 20 firmware (< hima-al00b 9.1.0.135\(c00e133r2p1\)) • huawei hisuite firmware (< 9.1.0.305)

Related

Weakness · CWE (1)

  • CWE-346 Origin Validation Error weakness

References