CVE Feed

    Dashboard / CVE / CVE-2019-5307

    CVE-2019-5307

    Some Huawei 4G LTE devices, P30 versions before ELE-AL00 9.1.0.162(C01E160R1P12/C01E160R2P1) and P30 Pro versions before VOG-AL00 9.1.0.162(C01E160R1P12/C01E160R2P1), are exposed to a message replay vulnerability. For the sake of better compatibility, these devices implement a less strict check on the NAS message sequence number (SN), specifically NAS COUNT. As a result, an attacker can construct a rogue base station and replay the GUTI reallocation command message in certain conditions to tamper with GUTIs, or replay the Identity request message to obtain IMSIs. (Vulnerability ID: HWPSIRT-2019-04107)

    Published:Jun 4, 2019
    Last Modified:Nov 21, 2024
    EPS:Jun 4, 2019
    EPSS Score:0.0003
    CVSS Score:4.2

    Affected Products

    Vendor
    Huawei
    Product
    P30
    Vendor
    Huawei
    Product
    P30 Firmware
    Vendor
    Huawei
    Product
    P30 Pro
    Vendor
    Huawei
    Product
    P30 Pro Firmware

    Exploits

    No exploit reference

    Related CVEs

    CVE-2020-9081 (CVSS 3.5) — There is an improper authorization vulnerability in some Huawei smartphones. An attacker could perform a serie…
    CVE-2021-22399 (CVSS 5.5) — The Bluetooth function of some Huawei smartphones has a DoS vulnerability. Attackers can install third-party a…
    CVE-2021-22331 (CVSS 7.5) — There is a JavaScript injection vulnerability in certain Huawei smartphones. A module does not verify some inp…
    CVE-2021-22330 (CVSS 6.5) — There is an out of bounds write vulnerability in Huawei Smartphone HUAWEI P30 versions 9.1.0.131(C00E130R1P21)…
    CVE-2021-22327 (CVSS 6.5) — There is an arbitrary memory write vulnerability in Huawei smart phone when processing file parsing. Due to in…
    CVE-2020-9203 (CVSS 3.3) — There is a resource management errors vulnerability in Huawei P30. Local attackers construct broadcast message…
    CVE-2020-9247 (CVSS 7.8) — There is a buffer overflow vulnerability in several Huawei products. The system does not sufficiently validate…
    CVE-2020-9263 (CVSS 7.8) — HUAWEI Mate 30 versions earlier than 10.1.0.150(C00E136R5P3) and HUAWEI P30 version earlier than 10.1.0.160(C0…
    CVE-2020-9104 (CVSS 4.3) — HUAWEI P30 smartphones with Versions earlier than 10.1.0.123(C431E22R2P5),Versions earlier than 10.1.0.123(C43…
    CVE-2020-9244 (CVSS 6.8) — HUAWEI Mate 20 versions Versions earlier than 10.1.0.160(C00E160R3P8);HUAWEI Mate 20 Pro versions Versions ear…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High