What’s Vulnerable › Vulnerabilities

CVE-2019-5263

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2019-11-29 · updated 2026-06-17
• Weakness: CWE-307

Description

HiSuite with 9.1.0.305 and earlier versions and 9.1.0.305(MAC) and earlier versions and HwBackup with earlier versions before 9.1.1.308 have a brute forcing encrypted backup data vulnerability. Huawei smartphone user backup information can be obtained by brute forcing the password for encrypting the backup.

Affected products

• HiSuite 4.0.5.300_OVE: through 9.1.0.305
• Huawei Hwbackup: through 9.1.1.308

References

• https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190821-01-backup-en
• https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190821-01-backup-en

Get alerted when CVE-2019-5263 or the next vulnerability affects your stack