High severity8.8NVD Advisory· Published Nov 29, 2019· Updated Jun 17, 2026

CVE-2019-5218

Description

There is an insufficient authentication vulnerability in Huawei Band 2 and Honor Band 3. The band does not sufficiently authenticate the device try to connect to it in certain scenario. Successful exploit could allow the attacker to spoof then connect to the band.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Huawei/Band 2 Firmware
cpe:2.3:o:huawei:band_2_firmware:*:*:*:*:*:*:*:*
Range: <eris-b19\/eris-b29_1.2.53
Huawei/Band 3 Firmware
cpe:2.3:o:huawei:band_3_firmware:*:*:*:*:*:*:*:*
Range: <nyx-b10hn_1.5.53
Huawei/Band 2, Honor Band 3description
Honojs/Band 3llm-create
Huawei/Band 2llm-fuzzy

Patches

Vulnerability mechanics

References

www.huawei.com/en/psirt/security-advisories/huawei-sa-20191106-01-band-ennvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.572
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000