← Back

CVE-2019-5263

nvd nist
Published: Nov 29, 2019Modified: Jun 17, 2026

JSON object

Loading...
5.5
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Exploitability: 1.8 / Impact: 3.6
Source: NVD

Description

HiSuite with 9.1.0.305 and earlier versions and 9.1.0.305(MAC) and earlier versions and HwBackup with earlier versions before 9.1.1.308 have a brute forcing encrypted backup data vulnerability. Huawei smartphone user backup information can be obtained by brute forcing the password for encrypting the backup.

Affected (3)

Products: Huawei: Hisuite, Hwbackup
Huawei
2 products
Hisuite
Hwbackup
Configuration A
3 vulnerable
Vulnerable SoftwareAffected Versions
Huawei
Hisuite
Up to 9.1.0.305
Hisuite
Up to 9.1.0.305
Hwbackup
Up to 9.1.1.308

Related CWEs

CWE-307
Improper Restriction of Excessive Authentication Attempts
The product does not implement sufficient measures to prevent multiple failed authentication attempts within a short time frame, making it more susceptible to brute force attacks.

References (2)

Source: psirt@huawei.com
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.