CVE-2019-5245

Published: Jun 13, 2019Modified: Jun 17, 2026

5.3

Vector

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Exploitability: 1.8 / Impact: 3.4

Source: NVD

Description

HiSuite 9.1.0.300 versions and earlier contains a DLL hijacking vulnerability. This vulnerability exists due to some DLL file is loaded by HiSuite improperly. And it allows an attacker to load this DLL file of the attacker's choosing that could execute arbitrary code.

Affected (1)

Products: Huawei: Hisuite

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Huawei Hisuite	Up to 9.1.0.300

Related CWEs

Uncontrolled Search Path Element

The product uses a fixed or controlled search path to find resources, but one or more locations in that path can be under the control of unintended actors.

References (2)

https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190612-01-dllhijacking-en

Source: psirt@huawei.com

Vendor Advisory

https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190612-01-dllhijacking-en

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.