CVE-2019-5218

8.8 highEPSS 0.4%

High (8.8) in huawei. EPSS 0.4% chance of exploitation in the next 30 days.

There is an insufficient authentication vulnerability in Huawei Band 2 and Honor Band 3. The band does not sufficiently authenticate the device try to connect to it in certain scenario. Successful exploit could allow the attacker to spoof then connect to the band.

Severity

CVSS 3.1

8.8 high

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 33% of CVEs (scores of 2026-10-31)
CWE: CWE-287
Published: 2019-11-29
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

huawei:band_2_firmware
huawei:band_3_firmware

References

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20191106-01-band-en
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20191106-01-band-en

Check your stack JSON