CVE-2019-9506

Published: Aug 14, 2019Modified: Jun 17, 2026

8.1

Vector

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Exploitability: 2.8 / Impact: 5.2

Source: NVD

Description

The Bluetooth BR/EDR specification up to and including version 5.1 permits sufficiently low encryption key length and does not prevent an attacker from influencing the key length negotiation. This allows practical brute-force attacks (aka "KNOB") that can decrypt traffic and inject arbitrary ciphertext without the victim noticing.

Affected (206)

Products: Google: Android · Apple: Iphone Os, Mac Os X, Tvos, Watchos · Canonical: Ubuntu Linux · +4 more

Show all products

Google: Android · Apple: Iphone Os, Mac Os X, Tvos, Watchos · Canonical: Ubuntu Linux · Debian: Debian Linux · Opensuse: Leap · Redhat: Enterprise Linux, Enterprise Linux Aus, Enterprise Linux Eus, Enterprise Linux For Real Time, Enterprise Linux For Real Time Eus, Enterprise Linux For Real Time For Nfv, Enterprise Linux For Real Time For Nfv Eus, Enterprise Linux Server, Enterprise Linux Server Aus, Enterprise Linux Server Tus, Enterprise Linux Tus, Mrg Realtime, Virtualization Host Eus · Huawei: Alp Al00b Firmware, Ares Al00b Firmware, Ares Al10d Firmware, Ares Tl00c Firmware, Asoka Al00ax Firmware, Atomu L33 Firmware, Atomu L41 Firmware, Atomu L42 Firmware, Bla Al00b Firmware, Bla L29c Firmware, Bla Tl00b Firmware, Barca Al00 Firmware, Berkeley Al20 Firmware, Berkeley L09 Firmware, Berkeley Tl10 Firmware, Cairogo L22 Firmware, Charlotte L29c Firmware, Columbia Al10b Firmware, Columbia Al10i Firmware, Columbia L29d Firmware, Columbia Tl00d Firmware, Cornell Al00a Firmware, Cornell Al00i Firmware, Cornell Al00ind Firmware, Cornell Al10ind Firmware, Cornell L29a Firmware, Cornell Tl10b Firmware, Dubai Al00a Firmware, Dura Al00a Firmware, Dura Tl00a Firmware, Emily L29c Firmware, Ever L29b Firmware, Figo L23 Firmware, Figo L31 Firmware, Figo Tl10b Firmware, Florida Al20b Firmware, Florida L21 Firmware, Florida L22 Firmware, Florida L23 Firmware, Florida Tl10b Firmware, Honor 20 Firmware, Mate 20 Firmware, Mate 20 Pro Firmware, Mate 20 X Firmware, P Smart Firmware, P Smart 2019 Firmware, P20 Firmware, P20 Pro Firmware, P30 Firmware, P30 Pro Firmware, Y5 2018 Firmware, Y5 Lite Firmware, Y6 2019 Firmware, Y6 Prime 2018 Firmware, Y6 Pro 2019 Firmware, Y7 2019 Firmware, Y9 2019 Firmware, Nova 3 Firmware, Nova 4 Firmware, Nova 5 Firmware, Nova 5i Pro Firmware, Nova Lite 3 Firmware, Harry Al00c Firmware, Harry Al10b Firmware, Harry Tl00c Firmware, Hima L29c Firmware, Honor 10 Lite Firmware, Honor 8a Firmware, Honor 8x Firmware, Honor View 10 Firmware, Honor View 20 Firmware, Jakarta Al00a Firmware, Johnson Tl00d Firmware, Johnson Tl00f Firmware, Katyusha Al00a Firmware, Laya Al00ep Firmware, Leland L21a Firmware, Leland L31a Firmware, Leland L32a Firmware, Leland L32c Firmware, Leland L42a Firmware, Leland L42c Firmware, Leland Tl10b Firmware, Leland Tl10c Firmware, Lelandp Al00c Firmware, Lelandp Al10b Firmware, Lelandp Al10d Firmware, Lelandp L22a Firmware, Lelandp L22c Firmware, Lelandp L22d Firmware, London Al40ind Firmware, Madrid Al00a Firmware, Madrid Tl00a Firmware, Neo Al00d Firmware, Paris Al00ic Firmware, Paris L21b Firmware, Paris L21meb Firmware, Paris L29b Firmware, Potter Al00c Firmware, Potter Al10a Firmware, Princeton Al10b Firmware, Princeton Al10d Firmware, Princeton Tl10c Firmware, Sydney Al00 Firmware, Sydney L21 Firmware, Sydney L21br Firmware, Sydney L22 Firmware, Sydney L22br Firmware, Sydney Tl00 Firmware, Sydneym Al00 Firmware, Sydneym L01 Firmware, Sydneym L03 Firmware, Sydneym L21 Firmware, Sydneym L22 Firmware, Sydneym L23 Firmware, Tony Al00b Firmware, Tony Tl00b Firmware, Yale Al00a Firmware, Yale Al50a Firmware, Yale L21a Firmware, Yale L61c Firmware, Yale Tl00b Firmware, Yalep Al10b Firmware, Imanager Neteco Firmware, Imanager Neteco 6000 Firmware, Honor 20 Pro Firmware

1 product

4 products

1 product

1 product

1 product

13 products

Enterprise Linux For Real Time

Enterprise Linux For Real Time Eus

Enterprise Linux For Real Time For Nfv

Enterprise Linux For Real Time For Nfv Eus

Enterprise Linux Server

Enterprise Linux Server Aus

Enterprise Linux Server Tus

Enterprise Linux Tus

Mrg Realtime

Virtualization Host Eus

126 products

Asoka Al00ax Firmware

Berkeley Al20 Firmware

Berkeley L09 Firmware

Berkeley Tl10 Firmware

Cairogo L22 Firmware

Charlotte L29c Firmware

Columbia Al10b Firmware

Columbia Al10i Firmware

Columbia L29d Firmware

Columbia Tl00d Firmware

Cornell Al00a Firmware

Cornell Al00i Firmware

Cornell Al00ind Firmware

Cornell Al10ind Firmware

Cornell L29a Firmware

Cornell Tl10b Firmware

Florida Al20b Firmware

Florida L21 Firmware

Florida L22 Firmware

Florida L23 Firmware

Florida Tl10b Firmware

P Smart 2019 Firmware

Y6 Prime 2018 Firmware

Honor 10 Lite Firmware

Honor 8a Firmware

Honor 8x Firmware

Honor View 10 Firmware

Honor View 20 Firmware

Jakarta Al00a Firmware

Johnson Tl00d Firmware

Johnson Tl00f Firmware

Katyusha Al00a Firmware

Leland Tl10b Firmware

Leland Tl10c Firmware

Lelandp Al00c Firmware

Lelandp Al10b Firmware

Lelandp Al10d Firmware

Lelandp L22a Firmware

Lelandp L22c Firmware

Lelandp L22d Firmware

London Al40ind Firmware

Madrid Al00a Firmware

Madrid Tl00a Firmware

Neo Al00d Firmware

Paris Al00ic Firmware

Paris L21b Firmware

Paris L21meb Firmware

Paris L29b Firmware

Potter Al00c Firmware

Potter Al10a Firmware

Princeton Al10b Firmware

Princeton Al10d Firmware

Princeton Tl10c Firmware

Sydney Al00 Firmware

Sydney L21 Firmware

Sydney L21br Firmware

Sydney L22 Firmware

Sydney L22br Firmware

Sydney Tl00 Firmware

Sydneym Al00 Firmware

Imanager Neteco Firmware

Imanager Neteco 6000 Firmware

Honor 20 Pro Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Google Android	All versions

Running on/with	Platform Versions
Blackberry Blackberry	All versions

Configuration B

6 vulnerable

Vulnerable Software	Affected Versions
Apple Iphone Os	Version 12.4
Apple Mac Os X	Version 10.12.6
Apple Mac Os X	Version 10.13.6
Apple Mac Os X	Version 10.14.5
Apple Tvos	Version 12.4
Apple Watchos	Version 5.3

Configuration C

3 vulnerable

Vulnerable Software	Affected Versions
Canonical Ubuntu Linux	Version 16.04
Canonical Ubuntu Linux	Version 18.04
Canonical Ubuntu Linux	Version 19.04

Configuration D

1 vulnerable

Vulnerable Software	Affected Versions
Debian Debian Linux	Version 8.0

Configuration E

2 vulnerable

Vulnerable Software	Affected Versions
Opensuse Leap	Version 15.0
Opensuse Leap	Version 15.1

Configuration F

31 vulnerable

Vulnerable Software	Affected Versions
Redhat Enterprise Linux	Version 8.0
Redhat Enterprise Linux Aus	Version 7.5
Redhat Enterprise Linux Eus	Version 7.6
Redhat Enterprise Linux Eus	Version 7.7
Redhat Enterprise Linux Eus	Version 8.1
Redhat Enterprise Linux Eus	Version 8.2
Redhat Enterprise Linux Eus	Version 8.4
Redhat Enterprise Linux For Real Time	Version 7
Redhat Enterprise Linux For Real Time	Version 8
Redhat Enterprise Linux For Real Time Eus	Version 8.2
Redhat Enterprise Linux For Real Time Eus	Version 8.4
Redhat Enterprise Linux For Real Time For Nfv	Version 7
Redhat Enterprise Linux For Real Time For Nfv	Version 8
Redhat Enterprise Linux For Real Time For Nfv Eus	Version 8.2
Redhat Enterprise Linux For Real Time For Nfv Eus	Version 8.4
Redhat Enterprise Linux Server	Version 7.0
Redhat Enterprise Linux Server Aus	Version 7.3
Redhat Enterprise Linux Server Aus	Version 7.4
Redhat Enterprise Linux Server Aus	Version 7.6
Redhat Enterprise Linux Server Aus	Version 7.7
Redhat Enterprise Linux Server Aus	Version 8.2
Redhat Enterprise Linux Server Aus	Version 8.4
Redhat Enterprise Linux Server Tus	Version 7.3
Redhat Enterprise Linux Server Tus	Version 7.4
Redhat Enterprise Linux Server Tus	Version 7.6
Redhat Enterprise Linux Server Tus	Version 7.7
Redhat Enterprise Linux Server Tus	Version 8.2
Redhat Enterprise Linux Server Tus	Version 8.4
Redhat Enterprise Linux Tus	Version 7.6
Redhat Mrg Realtime	Version 2.0
Redhat Virtualization Host Eus	Version 4.2

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Alp Al00b Firmware	Before 9.1.0.333\(c00e333r2p1t8\)

Running on/with	Platform Versions
Huawei Alp Al00b	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Ares Al00b Firmware	Before 9.1.0.160\(c00e160r2p5t8\)

Running on/with	Platform Versions
Huawei Ares Al00b	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Ares Al10d Firmware	Before 9.1.0.160\(c00e160r2p5t8\)

Running on/with	Platform Versions
Huawei Ares Al10d	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Ares Tl00c Firmware	Before 9.1.0.165\(c01e165r2p5t8\)

Running on/with	Platform Versions
Huawei Ares Tl00c	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Asoka Al00ax Firmware	Before 9.1.1.181\(c00e48r6p1\)

Running on/with	Platform Versions
Huawei Asoka Al00ax	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Atomu L33 Firmware	Before 8.0.0.147\(c605custc605d1\)

Running on/with	Platform Versions
Huawei Atomu L33	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Atomu L41 Firmware	Before 8.0.0.153\(c461custc461d1\)

Running on/with	Platform Versions
Huawei Atomu L41	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Atomu L42 Firmware	Before 8.0.0.155\(c636custc636d1\)

Running on/with	Platform Versions
Huawei Atomu L42	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Bla Al00b Firmware	Before 9.1.0.329\(c786e320r2p1t8\)

Running on/with	Platform Versions
Huawei Bla Al00b	All versions

Configuration P

1 vulnerable

Vulnerable Software	Affected Versions
Huawei Bla L29c Firmware	Before 9.1.0.300\(c605e2r1p12t8\)

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Bla Tl00b Firmware	Before 9.1.0.329\(c01e320r1p1t8\)

Running on/with	Platform Versions
Huawei Bla Tl00b	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Barca Al00 Firmware	Before 8.0.0.366\(c00\)

Running on/with	Platform Versions
Huawei Barca Al00	All versions

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Berkeley Al20 Firmware	Before 9.1.0.333\(c00e333r2p1t8\)

Running on/with	Platform Versions
Huawei Berkeley Al20	All versions

Configuration T

1 vulnerable

Vulnerable Software	Affected Versions
Huawei Berkeley L09 Firmware	Before 9.1.0.332\(c432e5r1p13t8\)

Configuration U

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Berkeley Tl10 Firmware	Before 9.1.0.333\(c01e333r1p1t8\)

Running on/with	Platform Versions
Huawei Berkeley Tl10	All versions

Configuration V

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Cairogo L22 Firmware	Before cairogo-l22c461b153

Running on/with	Platform Versions
Huawei Cairogo L22	All versions

Configuration W

1 vulnerable

Vulnerable Software	Affected Versions
Huawei Charlotte L29c Firmware	Before 9.1.0.311\(c605e2r1p11t8\)

Configuration X

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Columbia Al10b Firmware	Before 9.1.0.333\(c00e333r1p1t8\)

Running on/with	Platform Versions
Huawei Columbia Al10b	All versions

Configuration Y

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Columbia Al10i Firmware	Before 9.1.0.335\(c675e8r1p9t8\)

Running on/with	Platform Versions
Huawei Columbia Al10i	All versions

Configuration Z

1 vulnerable

Vulnerable Software	Affected Versions
Huawei Columbia L29d Firmware	Before 9.1.0.350\(c10e5r1p14t8\)

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Columbia Tl00d Firmware	Before 8.1.0.186\(c01gt\)

Running on/with	Platform Versions
Huawei Columbia Tl00d	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Cornell Al00a Firmware	Before 9.1.0.333\(c00e333r1p1t8\)

Running on/with	Platform Versions
Huawei Cornell Al00a	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Cornell Al00i Firmware	Before 9.1.0.363\(c675e3r1p9t8\)

Running on/with	Platform Versions
Huawei Cornell Al00i	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Cornell Al00ind Firmware	Before 8.2.0.141\(c675custc675d1gt\)

Running on/with	Platform Versions
Huawei Cornell Al00ind	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Cornell Al10ind Firmware	Before 9.1.0.363\(c675e2r1p9t8\)

Running on/with	Platform Versions
Huawei Cornell Al10ind	All versions

Configuration F

1 vulnerable

Vulnerable Software	Affected Versions
Huawei Cornell L29a Firmware	Before 9.1.0.336\(c636e2r1p12t8\)

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Cornell Tl10b Firmware	Before 9.1.0.333\(c01e333r1p1t8\)

Running on/with	Platform Versions
Huawei Cornell Tl10b	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Dubai Al00a Firmware	Before 8.2.0.190\(c00r2p2\)

Running on/with	Platform Versions
Huawei Dubai Al00a	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Dura Al00a Firmware	Before 1.0.0.182\(c00\)

Running on/with	Platform Versions
Huawei Dura Al00a	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Dura Tl00a Firmware	Before 1.0.0.176\(c01\)

Running on/with	Platform Versions
Huawei Dura Tl00a	All versions

Configuration K

1 vulnerable

Vulnerable Software	Affected Versions
Huawei Emily L29c Firmware	Version 8.1.0.156(c605)

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Ever L29b Firmware	Before 9.1.0.338\(c185e3r3p1\)

Running on/with	Platform Versions
Huawei Ever L29b	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Figo L23 Firmware	Before 9.1.0.160\(c605e6r1p5t8\)

Running on/with	Platform Versions
Huawei Figo L23	All versions

Configuration N

1 vulnerable

Vulnerable Software	Affected Versions
Huawei Figo L31 Firmware	Version 8.0.0.122d(c652)

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Figo Tl10b Firmware	Before 9.1.0.130\(c01e115r2p8t8\)

Running on/with	Platform Versions
Huawei Figo Tl10b	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Florida Al20b Firmware	Before 9.1.0.128\(c00e112r1p6t8\)

Running on/with	Platform Versions
Huawei Florida Al20b	All versions

Configuration Q

1 vulnerable

Vulnerable Software	Affected Versions
Huawei Florida L21 Firmware	Before 9.1.0.150\(c185e6r1p5t8\)

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Florida L22 Firmware	Before 9.1.0.150\(c636e6r1p5t8\)

Running on/with	Platform Versions
Huawei Florida L22	All versions

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Florida L23 Firmware	Before 9.1.0.154\(c605e7r1p2t8\)

Running on/with	Platform Versions
Huawei Florida L23	All versions

Configuration T

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Florida Tl10b Firmware	Before 9.1.0.128\(c01e112r1p6t8\)

Running on/with	Platform Versions
Huawei Florida Tl10b	All versions

Configuration U

1 vulnerable

Vulnerable Software	Affected Versions
Huawei Honor 20 Firmware	Before 9.1.0.143\(c675e8r2p1\)

Configuration W

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Mate 20 Firmware	All versions

Running on/with	Platform Versions
Huawei Mate 20	All versions

Configuration X

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Mate 20 Pro Firmware	All versions

Running on/with	Platform Versions
Huawei Mate 20 Pro	All versions

Configuration Y

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Mate 20 X Firmware	All versions

Running on/with	Platform Versions
Huawei Mate 20 X	All versions

Configuration Z

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei P Smart Firmware	All versions

Running on/with	Platform Versions
Huawei P Smart	All versions

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei P Smart 2019 Firmware	All versions

Running on/with	Platform Versions
Huawei P Smart 2019	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei P20 Firmware	All versions

Running on/with	Platform Versions
Huawei P20	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei P20 Pro Firmware	All versions

Running on/with	Platform Versions
Huawei P20 Pro	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei P30 Firmware	All versions

Running on/with	Platform Versions
Huawei P30	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei P30 Pro Firmware	All versions

Running on/with	Platform Versions
Huawei P30 Pro	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Y5 2018 Firmware	All versions

Running on/with	Platform Versions
Huawei Y5 2018	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Y5 Lite Firmware	All versions

Running on/with	Platform Versions
Huawei Y5 Lite	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Y6 2019 Firmware	All versions

Running on/with	Platform Versions
Huawei Y6 2019	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Y6 Prime 2018 Firmware	All versions

Running on/with	Platform Versions
Huawei Y6 Prime 2018	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Y6 Pro 2019 Firmware	All versions

Running on/with	Platform Versions
Huawei Y6 Pro 2019	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Y7 2019 Firmware	All versions

Running on/with	Platform Versions
Huawei Y7 2019	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Y9 2019 Firmware	All versions

Running on/with	Platform Versions
Huawei Y9 2019	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Nova 3 Firmware	All versions

Running on/with	Platform Versions
Huawei Nova 3	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Nova 4 Firmware	All versions

Running on/with	Platform Versions
Huawei Nova 4	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Nova 5 Firmware	All versions

Running on/with	Platform Versions
Huawei Nova 5	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Nova 5i Pro Firmware	All versions

Running on/with	Platform Versions
Huawei Nova 5i Pro	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Nova Lite 3 Firmware	All versions

Running on/with	Platform Versions
Huawei Nova Lite 3	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Harry Al00c Firmware	All versions

Running on/with	Platform Versions
Huawei Harry Al00c	All versions

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Harry Al10b Firmware	All versions

Running on/with	Platform Versions
Huawei Harry Al10b	All versions

Configuration T

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Harry Tl00c Firmware	All versions

Running on/with	Platform Versions
Huawei Harry Tl00c	All versions

Configuration U

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Hima L29c Firmware	All versions

Running on/with	Platform Versions
Huawei Hima L29c	All versions

Configuration V

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Honor 10 Lite Firmware	All versions

Running on/with	Platform Versions
Huawei Honor 10 Lite	All versions

Configuration W

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Honor 8a Firmware	All versions

Running on/with	Platform Versions
Huawei Honor 8a	All versions

Configuration X

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Honor 8x Firmware	All versions

Running on/with	Platform Versions
Huawei Honor 8x	All versions

Configuration Y

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Honor View 10 Firmware	All versions

Running on/with	Platform Versions
Huawei Honor View 10	All versions

Configuration Z

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Honor View 20 Firmware	All versions

Running on/with	Platform Versions
Huawei Honor View 20	All versions

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Jakarta Al00a Firmware	All versions

Running on/with	Platform Versions
Huawei Jakarta Al00a	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Johnson Tl00d Firmware	All versions

Running on/with	Platform Versions
Huawei Johnson Tl00d	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Johnson Tl00f Firmware	All versions

Running on/with	Platform Versions
Huawei Johnson Tl00f	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Katyusha Al00a Firmware	All versions

Running on/with	Platform Versions
Huawei Katyusha Al00a	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Laya Al00ep Firmware	All versions

Running on/with	Platform Versions
Huawei Laya Al00ep	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Leland L21a Firmware	All versions

Running on/with	Platform Versions
Huawei Leland L21a	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Leland L31a Firmware	All versions

Running on/with	Platform Versions
Huawei Leland L31a	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Leland L32a Firmware	All versions

Running on/with	Platform Versions
Huawei Leland L32a	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Leland L32c Firmware	All versions

Running on/with	Platform Versions
Huawei Leland L32c	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Leland L42a Firmware	All versions

Running on/with	Platform Versions
Huawei Leland L42a	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Leland L42c Firmware	All versions

Running on/with	Platform Versions
Huawei Leland L42c	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Leland Tl10b Firmware	All versions

Running on/with	Platform Versions
Huawei Leland Tl10b	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Leland Tl10c Firmware	All versions

Running on/with	Platform Versions
Huawei Leland Tl10c	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Lelandp Al00c Firmware	All versions

Running on/with	Platform Versions
Huawei Lelandp Al00c	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Lelandp Al10b Firmware	All versions

Running on/with	Platform Versions
Huawei Lelandp Al10b	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Lelandp Al10d Firmware	All versions

Running on/with	Platform Versions
Huawei Lelandp Al10d	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Lelandp L22a Firmware	All versions

Running on/with	Platform Versions
Huawei Lelandp L22a	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Lelandp L22c Firmware	All versions

Running on/with	Platform Versions
Huawei Lelandp L22c	All versions

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Lelandp L22d Firmware	All versions

Running on/with	Platform Versions
Huawei Lelandp L22d	All versions

Configuration T

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei London Al40ind Firmware	All versions

Running on/with	Platform Versions
Huawei London Al40ind	All versions

Configuration U

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Madrid Al00a Firmware	All versions

Running on/with	Platform Versions
Huawei Madrid Al00a	All versions

Configuration V

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Madrid Tl00a Firmware	All versions

Running on/with	Platform Versions
Huawei Madrid Tl00a	All versions

Configuration W

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Neo Al00d Firmware	All versions

Running on/with	Platform Versions
Huawei Neo Al00d	All versions

Configuration X

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Paris Al00ic Firmware	All versions

Running on/with	Platform Versions
Huawei Paris Al00ic	All versions

Configuration Y

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Paris L21b Firmware	All versions

Running on/with	Platform Versions
Huawei Paris L21b	All versions

Configuration Z

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Paris L21meb Firmware	All versions

Running on/with	Platform Versions
Huawei Paris L21meb	All versions

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Paris L29b Firmware	All versions

Running on/with	Platform Versions
Huawei Paris L29b	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Potter Al00c Firmware	All versions

Running on/with	Platform Versions
Huawei Potter Al00c	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Potter Al10a Firmware	All versions

Running on/with	Platform Versions
Huawei Potter Al10a	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Princeton Al10b Firmware	All versions

Running on/with	Platform Versions
Huawei Princeton Al10b	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Princeton Al10d Firmware	All versions

Running on/with	Platform Versions
Huawei Princeton Al10d	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Princeton Tl10c Firmware	All versions

Running on/with	Platform Versions
Huawei Princeton Tl10c	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Sydney Al00 Firmware	All versions

Running on/with	Platform Versions
Huawei Sydney Al00	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Sydney L21 Firmware	All versions

Running on/with	Platform Versions
Huawei Sydney L21	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Sydney L21br Firmware	All versions

Running on/with	Platform Versions
Huawei Sydney L21br	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Sydney L22 Firmware	All versions

Running on/with	Platform Versions
Huawei Sydney L22	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Sydney L22br Firmware	All versions

Running on/with	Platform Versions
Huawei Sydney L22br	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Sydney Tl00 Firmware	All versions

Running on/with	Platform Versions
Huawei Sydney Tl00	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Sydneym Al00 Firmware	All versions

Running on/with	Platform Versions
Huawei Sydneym Al00	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Sydneym L01 Firmware	All versions

Running on/with	Platform Versions
Huawei Sydneym L01	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Sydneym L03 Firmware	All versions

Running on/with	Platform Versions
Huawei Sydneym L03	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Sydneym L21 Firmware	All versions

Running on/with	Platform Versions
Huawei Sydneym L21	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Sydneym L22 Firmware	All versions

Running on/with	Platform Versions
Huawei Sydneym L22	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Sydneym L23 Firmware	All versions

Running on/with	Platform Versions
Huawei Sydneym L23	All versions

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Tony Al00b Firmware	All versions

Running on/with	Platform Versions
Huawei Tony Al00b	All versions

Configuration T

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Tony Tl00b Firmware	All versions

Running on/with	Platform Versions
Huawei Tony Tl00b	All versions

Configuration U

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Yale Al00a Firmware	All versions

Running on/with	Platform Versions
Huawei Yale Al00a	All versions

Configuration V

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Yale Al50a Firmware	All versions

Running on/with	Platform Versions
Huawei Yale Al50a	All versions

Configuration W

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Yale L21a Firmware	All versions

Running on/with	Platform Versions
Huawei Yale L21a	All versions

Configuration X

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Yale L61c Firmware	All versions

Running on/with	Platform Versions
Huawei Yale L61c	All versions

Configuration Y

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Yale Tl00b Firmware	All versions

Running on/with	Platform Versions
Huawei Yale Tl00b	All versions

Configuration Z

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Yalep Al10b Firmware	All versions

Running on/with	Platform Versions
Huawei Yalep Al10b	All versions

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Imanager Neteco Firmware	All versions

Running on/with	Platform Versions
Huawei Imanager Neteco	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Imanager Neteco 6000 Firmware	All versions

Running on/with	Platform Versions
Huawei Imanager Neteco 6000	All versions

Configuration C

1 vulnerable

Vulnerable Software	Affected Versions
Huawei Bla L29c Firmware	Before 9.1.0.306\(c185e2r1p13t8\)

Configuration D

1 vulnerable

Vulnerable Software	Affected Versions
Huawei Bla L29c Firmware	Before 9.1.0.306\(c432e4r1p11t8\)

Configuration E

1 vulnerable

Vulnerable Software	Affected Versions
Huawei Bla L29c Firmware	Before 9.1.0.306\(c636e2r1p13t8\)

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Bla L29c Firmware	Before 9.1.0.307\(c635e4r1p13t8\)

Running on/with	Platform Versions
Huawei Bla L29c	All versions

Configuration G

1 vulnerable

Vulnerable Software	Affected Versions
Huawei Berkeley L09 Firmware	Before 9.1.0.350\(c10e3r1p14t8\)

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Berkeley L09 Firmware	Before 9.1.0.350\(c636e4r1p13t8\)

Running on/with	Platform Versions
Huawei Berkeley L09	All versions

Configuration I

1 vulnerable

Vulnerable Software	Affected Versions
Huawei Charlotte L29c Firmware	Before 9.1.0.325\(c185e4r1p11t8\)

Configuration J

1 vulnerable

Vulnerable Software	Affected Versions
Huawei Charlotte L29c Firmware	Before 9.1.0.325\(c636e2r1p12t8\)

Configuration K

1 vulnerable

Vulnerable Software	Affected Versions
Huawei Charlotte L29c Firmware	Before 9.1.0.328\(c432e5r1p9t8\)

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Charlotte L29c Firmware	Before 9.1.0.328\(c782e10r1p9t8\)

Running on/with	Platform Versions
Huawei Charlotte L29c	All versions

Configuration M

1 vulnerable

Vulnerable Software	Affected Versions
Huawei Columbia L29d Firmware	Before 9.1.0.350\(c185e3r1p12t8\)

Configuration N

1 vulnerable

Vulnerable Software	Affected Versions
Huawei Columbia L29d Firmware	Before 9.1.0.350\(c461e3r1p11t8\)

Configuration O

1 vulnerable

Vulnerable Software	Affected Versions
Huawei Columbia L29d Firmware	Before 9.1.0.350\(c636e3r1p13t8\)

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Columbia L29d Firmware	Before 9.1.0.351\(c432e5r1p13t8\)

Running on/with	Platform Versions
Huawei Columbia L29d	All versions

Configuration Q

1 vulnerable

Vulnerable Software	Affected Versions
Huawei Cornell L29a Firmware	Before 9.1.0.341\(c185e1r1p9t8\)

Configuration R

1 vulnerable

Vulnerable Software	Affected Versions
Huawei Cornell L29a Firmware	Before 9.1.0.342\(c461e1r1p9t8\)

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Cornell L29a Firmware	Before 9.1.0.347\(c432e1r1p9t8\)

Running on/with	Platform Versions
Huawei Cornell L29a	All versions

Configuration T

1 vulnerable

Vulnerable Software	Affected Versions
Huawei Emily L29c Firmware	Before 9.1.0.311\(c461e2r1p11t8\)

Configuration U

1 vulnerable

Vulnerable Software	Affected Versions
Huawei Emily L29c Firmware	Before 9.1.0.325\(c185e2r1p12t8\)

Configuration V

1 vulnerable

Vulnerable Software	Affected Versions
Huawei Emily L29c Firmware	Before 9.1.0.325\(c636e7r1p13t8\)

Configuration W

1 vulnerable

Vulnerable Software	Affected Versions
Huawei Emily L29c Firmware	Before 9.1.0.326\(c635e2r1p11t8\)

Configuration X

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Emily L29c Firmware	Before 9.1.0.328\(c432e7r1p11t8\)

Running on/with	Platform Versions
Huawei Emily L29c	All versions

Configuration Y

1 vulnerable

Vulnerable Software	Affected Versions
Huawei Figo L31 Firmware	Before 9.1.0.122\(c09e7r1p5t8\)

Configuration Z

1 vulnerable

Vulnerable Software	Affected Versions
Huawei Figo L31 Firmware	Before 9.1.0.137\(c33e8r1p5t8\)

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Huawei Figo L31 Firmware	Before 9.1.0.137\(c530e8r1p5t8\)

Configuration B

1 vulnerable

Vulnerable Software	Affected Versions
Huawei Figo L31 Firmware	Before 9.1.0.158\(c432e8r1p5t8\)

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Figo L31 Firmware	Before 9.1.0.165\(c10e8r1p5t8\)

Running on/with	Platform Versions
Huawei Figo L31	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Florida L21 Firmware	Before 9.1.0.150\(c432e6r1p5t8\)

Running on/with	Platform Versions
Huawei Florida L21	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Honor 20 Firmware	Before 9.1.0.149\(c675e8r2p1\)

Running on/with	Platform Versions
Huawei Honor 20	All versions

Configuration F

1 vulnerable

Vulnerable Software	Affected Versions
Huawei Honor 20 Pro Firmware	Before 9.1.0.154\(c185e2r5p1\)

Configuration G

1 vulnerable

Vulnerable Software	Affected Versions
Huawei Honor 20 Pro Firmware	Before 9.1.0.154\(c432e2r5p1\)

Configuration H

1 vulnerable

Vulnerable Software	Affected Versions
Huawei Honor 20 Pro Firmware	Before 9.1.0.154\(c636e2r3p1\)

Configuration I

1 vulnerable

Vulnerable Software	Affected Versions
Huawei Honor 20 Pro Firmware	Before 9.1.0.155\(c10e2r3p1\)

Configuration J

1 vulnerable

Vulnerable Software	Affected Versions
Huawei Honor 20 Pro Firmware	Before 9.1.0.170\(c185e2r5p1\)

Configuration K

1 vulnerable

Vulnerable Software	Affected Versions
Huawei Honor 20 Pro Firmware	Before 9.1.0.170\(c636e2r3p1\)

Configuration L

1 vulnerable

Vulnerable Software	Affected Versions
Huawei Honor 20 Pro Firmware	Before 9.1.0.171\(c10e2r3p1\)

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Honor 20 Pro Firmware	Before 9.1.0.172\(c432e2r5p1\)

Running on/with	Platform Versions
Huawei Honor 20 Pro	All versions

Related CWEs

CWE-310

CWE-327

Use of a Broken or Risky Cryptographic Algorithm

The product uses a broken or risky cryptographic algorithm or protocol.

References (60)

http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00036.html

Source: cret@cert.org

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00037.html

Source: cret@cert.org

Mailing ListThird Party Advisory

http://seclists.org/fulldisclosure/2019/Aug/11

Source: cret@cert.org

Mailing ListThird Party Advisory

http://seclists.org/fulldisclosure/2019/Aug/13

Source: cret@cert.org

Mailing ListThird Party Advisory

http://seclists.org/fulldisclosure/2019/Aug/14

Source: cret@cert.org

Mailing ListThird Party Advisory

http://seclists.org/fulldisclosure/2019/Aug/15

Source: cret@cert.org

Mailing ListThird Party Advisory

http://www.cs.ox.ac.uk/publications/publication12404-abstract.html

Source: cret@cert.org

Third Party Advisory

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190828-01-knob-en

Source: cret@cert.org

Third Party Advisory

https://access.redhat.com/errata/RHSA-2019:2975

Source: cret@cert.org

Third Party Advisory

https://access.redhat.com/errata/RHSA-2019:3055

Source: cret@cert.org

Third Party Advisory

https://access.redhat.com/errata/RHSA-2019:3076

Source: cret@cert.org

Third Party Advisory

https://access.redhat.com/errata/RHSA-2019:3089

Source: cret@cert.org

Third Party Advisory

https://access.redhat.com/errata/RHSA-2019:3165

Source: cret@cert.org

Third Party Advisory

https://access.redhat.com/errata/RHSA-2019:3187

Source: cret@cert.org

Third Party Advisory

https://access.redhat.com/errata/RHSA-2019:3217

Source: cret@cert.org

Third Party Advisory

https://access.redhat.com/errata/RHSA-2019:3218

Source: cret@cert.org

Third Party Advisory

https://access.redhat.com/errata/RHSA-2019:3220

Source: cret@cert.org

Third Party Advisory

https://access.redhat.com/errata/RHSA-2019:3231

Source: cret@cert.org

Third Party Advisory

https://access.redhat.com/errata/RHSA-2019:3309

Source: cret@cert.org

Third Party Advisory

https://access.redhat.com/errata/RHSA-2019:3517

Source: cret@cert.org

Third Party Advisory

https://access.redhat.com/errata/RHSA-2020:0204

Source: cret@cert.org

Third Party Advisory

https://lists.debian.org/debian-lts-announce/2019/09/msg00014.html

Source: cret@cert.org

Mailing ListThird Party Advisory

https://lists.debian.org/debian-lts-announce/2019/09/msg00015.html

Source: cret@cert.org

Mailing ListThird Party Advisory

https://lists.debian.org/debian-lts-announce/2019/09/msg00025.html

Source: cret@cert.org

Mailing ListThird Party Advisory

https://usn.ubuntu.com/4115-1/

Source: cret@cert.org

Third Party Advisory

https://usn.ubuntu.com/4118-1/

Source: cret@cert.org

Third Party Advisory

https://usn.ubuntu.com/4147-1/

Source: cret@cert.org

Third Party Advisory

https://www.bluetooth.com/security/statement-key-negotiation-of-bluetooth/

Source: cret@cert.org

Third Party Advisory

https://www.kb.cert.org/vuls/id/918987/

Source: cret@cert.org

Third Party AdvisoryUS Government Resource

https://www.usenix.org/conference/usenixsecurity19/presentation/antonioli

Source: cret@cert.org

Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00036.html