NetSight
medium5.4

CVE-2019-5271

There is an information leak vulnerability in Huawei smart speaker Myna.

Impact

There is an information leak vulnerability in Huawei smart speaker Myna. When the smart speaker is paired with the cloud through Wi-Fi, the speaker incorrectly processes some data. Attackers can exploit this vulnerability to read and modify specific configurations of speakers through a series of operations.

Affected products

VendorProductAffected versions
HuaweiMyna Firmware
Versions 9.0.1.9\(h100sp6c00\), 9.0.1.10\(h100sp5c00\), 9.0.1.10\(h100sp8c00\), 9.0.1.10\(h100sp10c00\), 9.0.1.10\(h100sp11c00\), 9.0.1.10\(h100sp12c00\)

References