CVSS 3.1
3.5 lowCVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:NCVE-2019-5252
There is an improper authentication vulnerability in Huawei smartphones (Y9, Honor 8X, Honor 9 Lite, Honor 9i, Y6 Pro). The applock does not perform a sufficient authentication in a rare condition. Successful exploit could allow the attacker to use the application locked by applock in an instant.
Severity
- EPSS
- 0.2% chance of exploitation in the next 30 days; higher than 12% of CVEs (scores of 2026-10-31)
- CWE
- CWE-287
- Published
- Modified
- Record from
- the NVD, synced
Affected
- huawei:enjoy_8_plus_firmware
- huawei:honor_8x_firmware
- huawei:honor_9_lite_firmware
- huawei:honor_9i_firmware
- huawei:y6_pro_firmware
- huawei:y9_firmware