CVE-2019-5251
mediumpriority · track · 22EPSS 0.008 · 58 %ileEUUSEPSS · scored 2026-10-27
There is a path traversal vulnerability in several Huawei smartphones. The system does not sufficiently validate certain pathnames from the application. An attacker could trick the user into installing, backing up and restoring a malicious application. Successful exploit could cause information disclosure.
cvss
Technical severity, 0–10. One row per scoring source.
base score 0–10 · higher = more severe · hover a vector to decode
weaknesses
The CWE weakness classes this flaw belongs to.
affected products (20)
Products and version ranges known to be affected.
- n/a Honor V10;P30;Mate 20;Honor 9 Lite;Honor 9i;M6;P30 Pro;Honor 20s≤ Versions earlier than 9.1.0.130(C00E112R2P10T8)enisa_euvdEU
- n/a Honor V10;P30;Mate 20;Honor 9 Lite;Honor 9i;M6;P30 Pro;Honor 20s≤ Versions earlier than 9.1.0.226(C00E220R2P1)enisa_euvdEU
- n/a Honor V10;P30;Mate 20;Honor 9 Lite;Honor 9i;M6;P30 Pro;Honor 20s≤ Versions earlier than 9.1.0.226(C00E210R2P1)enisa_euvdEU
- n/a Honor V10;P30;Mate 20;Honor 9 Lite;Honor 9i;M6;P30 Pro;Honor 20s≤ Versions earlier than 9.1.0.333(C00E333R2P1T8)enisa_euvdEU
- n/a Honor V10;P30;Mate 20;Honor 9 Lite;Honor 9i;M6;P30 Pro;Honor 20s≤ Versions earlier than 9.1.0.120(C00E113R1P6T8)enisa_euvdEU
- n/a Honor V10;P30;Mate 20;Honor 9 Lite;Honor 9i;M6;P30 Pro;Honor 20s≤ Versions earlier than 9.1.1.150(C00E150R1P150)enisa_euvdEU
- n/a Honor V10;P30;Mate 20;Honor 9 Lite;Honor 9i;M6;P30 Pro;Honor 20s≤ Versions earlier than 9.1.0.139(C00E133R3P1)enisa_euvdEU
- n/a Honor V10;P30;Mate 20;Honor 9 Lite;Honor 9i;M6;P30 Pro;Honor 20s≤ Versions earlier than 9.1.0.143(C636E5R1P5T8)enisa_euvdEU
- n/a Honor V10;P30;Mate 20;Honor 9 Lite;Honor 9i;M6;P30 Pro;Honor 20s≤ Versions earlier than 9.1.0.130(C00E115R2P8T8)enisa_euvdEU
- n/a Honor V10;P30;Mate 20;Honor 9 Lite;Honor 9i;M6;P30 Pro;Honor 20s≤ Versions earlier than 9.1.1.132(C00E131R6P1)enisa_euvdEU
- huawei enjoy 7s firmware< 9.1.0.130\(c00e115r2p8t8\)nvdUScpe:2.3:o:huawei:enjoy_7s_firmware:*:*:*:*:*:*:*:*
- huawei honor 20s firmware< 9.1.1.132\(c00e131r6p1\)nvdUScpe:2.3:o:huawei:honor_20s_firmware:*:*:*:*:*:*:*:*
- huawei honor 9 lite firmware< 9.1.0.130\(c00e112r2p10t8\)nvdUScpe:2.3:o:huawei:honor_9_lite_firmware:*:*:*:*:*:*:*:*
- huawei honor 9 lite firmware< 9.1.0.143\(c636e5r1p5t8\)nvdUScpe:2.3:o:huawei:honor_9_lite_firmware:*:*:*:*:*:*:*:*
- huawei honor 9i firmware< 9.1.0.120\(c00e113r1p6t8\)nvdUScpe:2.3:o:huawei:honor_9i_firmware:*:*:*:*:*:*:*:*
- huawei honor v10 firmware< 9.1.0.333\(c00e333r2p1t8\)nvdUScpe:2.3:o:huawei:honor_v10_firmware:*:*:*:*:*:*:*:*
- huawei mate 20 firmware< 9.1.0.139\(c00e133r3p1\)nvdUScpe:2.3:o:huawei:mate_20_firmware:*:*:*:*:*:*:*:*
- huawei p30 pro firmware< 9.1.0.226\(c00e210r2p1\)nvdUScpe:2.3:o:huawei:p30_pro_firmware:*:*:*:*:*:*:*:*
also known as (3)
Other names and identifiers for this entity.
sources
Which sources assert this record, and when.
references (5)
External citations — patches, advisories, analysis.
- https://nvd.nist.gov/vuln/detail/CVE-2019-5251cnnvd
- https://www.huawei.com/cn/psirt/security-advisories/huawei-sa-20191204-03-smartphone-cncnnvd
- https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20191204-03-smartphone-encnnvd
- https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20191204-03-smartphone-enenisa_euvd
- https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20191204-03-smartphone-enVendor Advisorynvd
Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.
Free scan