CVE-2019-5307

State: Published
Severity: Not scored
Published: Jun 4, 2019
Updated: Aug 4, 2024
Reserved: Jan 4, 2019

Description

Some Huawei 4G LTE devices, P30 versions before ELE-AL00 9.1.0.162(C01E160R1P12/C01E160R2P1) and P30 Pro versions before VOG-AL00 9.1.0.162(C01E160R1P12/C01E160R2P1), are exposed to a message replay vulnerability. For the sake of better compatibility, these devices implement a less strict check on the NAS message sequence number (SN), specifically NAS COUNT. As a result, an attacker can construct a rogue base station and replay the GUTI reallocation command message in certain conditions to tamper with GUTIs, or replay the Identity request message to obtain IMSIs. (Vulnerability ID: HWPSIRT-2019-04107)

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
P30,P30 ProHuawei	The versions before ELE-AL00 9.1.0.162(C01E160R1P12/C01E160R2P1)Affected The versions before VOG-AL00 9.1.0.162(C01E160R1P12/C01E160R2P1)Affected

References

https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190529-01-replay-en

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.