CVE-2019-5271 Information disclosure in Myna
Attackers can read and modify specific configurations of Huawei Myna smart speakers by exploiting an information leak during Wi-Fi cloud pairing.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2019-5271?
CVE-2019-5271 is a medium-severity vulnerability in Myna, published on 29 Nov 2019. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
There is an information leak vulnerability in Huawei smart speaker Myna. When the smart speaker is paired with the cloud through Wi-Fi, the speaker incorrectly processes some data. Attackers can exploit this vulnerability to read and modify specific configurations of speakers through a series of operations.
Which versions are affected by CVE-2019-5271?
It affects 1 product.
Products include Huawei Myna Firmware.
How do I fix CVE-2019-5271?
No fix has been published for CVE-2019-5271 yet. Limit exposure of the affected software until one is available.
Is CVE-2019-5271 being exploited?
There is no known exploitation of CVE-2019-5271 in the wild and no public exploit code.
Other vulnerabilities in Myna
Sources
Also known as GHSA-4hxg-f64g-48jf.