CVE-2019-5242 Code injection in PCManager
Attackers can execute malicious code and read/write memory by tricking users into installing a malicious application in Huawei PCManager.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2019-5242?
CVE-2019-5242 is a high-severity code injection vulnerability in Huawei PCManager, published on 6 Jun 2019. It can only be exploited from the same machine or local network, and only if a user opens a file or follows a link.
Official description
There is a code execution vulnerability in Huawei PCManager versions earlier than PCManager 9.0.1.50. The attacker can tricking a user to install and run a malicious application to exploit this vulnerability. Successful exploitation may cause the attacker to execute malicious code and read/write memory.
Which versions are affected by CVE-2019-5242?
It affects 1 product.
Products include Huawei Pcmanager.
How do I fix CVE-2019-5242?
No fix has been published for CVE-2019-5242 yet. Limit exposure of the affected software until one is available.
Upgrade, and never evaluate templates, expressions or code built from user input. More about Code injection.
Is CVE-2019-5242 being exploited?
There is no known exploitation of CVE-2019-5242 in the wild and no public exploit code.
Other vulnerabilities in Huawei PCManager
Sources
Also known as GHSA-87gh-p63v-wh75.