What is the CVSS score of CVE-2019-5235?

CVE-2019-5235 has a CVSS 3.1 base score of 5.3 (Medium). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L. EPSS exploitation probability: 1.0%.

Alp Al00B Firmware CVE-2019-5235

MEDIUM

NULL Pointer Dereference (CWE-476)

2019-12-14 psirt@huawei.com

Null Pointer Dereference Huawei Denial Of Service Alp Al00B Firmware Alp Tl00B Firmware Bla Al00B Firmware Bla Tl00B Firmware Charlotte Al00A Firmware Charlotte Tl00B Firmware Columbia Al10B Firmware Columbia Al10I Firmware Columbia L29D Firmware Columbia Tl00D Firmware Elle Al00B Firmware Elle Tl00B Firmware Emily Al00A Firmware Emily Tl00B Firmware Ever Al00B Firmware Ever L29B Firmware Harry Al00C Firmware Harry Al10B Firmware Harry Tl00C Firmware Hima Al00B Firmware Jackman L21 Firmware Jackman L22 Firmware Jackman L23 Firmware Johnson Al00Ic Firmware Johnson Al10C Firmware Johnson L21C Firmware Johnson L21D Firmware Johnson L22C Firmware Johnson L22D Firmware Johnson L23C Firmware Johnson L42Ic Firmware Johnson L42Ie Firmware Johnson L42If Firmware Johnson Tl00D Firmware Johnson Tl00F Firmware Laya Al00Ep Firmware Neo Al00D Firmware Potter Al00C Firmware Potter Al10A Firmware Princeton Al10B Firmware Princeton Al10D Firmware Princeton Al10I Firmware Princeton Tl10C Firmware Tony Al00B Firmware Tony Tl00B Firmware Vogue Al00A Firmware Vogue Al00A Preload Firmware Vogue Al10C Firmware Vogue Al10C Preload Firmware Vogue Tl00B Firmware

5.3

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

5.3 MEDIUM

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

Low

Lifecycle Timeline

CVE Published

Dec 14, 2019 - 00:15 nvd

MEDIUM 5.3

DescriptionNVD

Some Huawei smart phones have a null pointer dereference vulnerability. An attacker crafts specific packets and sends to the affected product to exploit this vulnerability. Successful exploitation may cause the affected phone to be abnormal.

AnalysisAI

Some Huawei smart phones have a null pointer dereference vulnerability. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified as NULL Pointer Dereference (CWE-476), which allows attackers to crash the application by dereferencing a null pointer. Some Huawei smart phones have a null pointer dereference vulnerability. An attacker crafts specific packets and sends to the affected product to exploit this vulnerability. Successful exploitation may cause the affected phone to be abnormal. Affected products include: Huawei Alp-Al00B Firmware, Huawei Alp-Tl00B Firmware, Huawei Bla-Al00B Firmware, Huawei Bla-Tl00B Firmware, Huawei Charlotte-Al00A Firmware.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Check pointers before dereferencing. Use static analysis tools to detect null pointer paths.