VYPR
Unrated severityNVD Advisory· Published Jun 6, 2019· Updated Aug 4, 2024

CVE-2019-5241

CVE-2019-5241

Description

There is a privilege escalation vulnerability in Huawei PCManager versions earlier than PCManager 9.0.1.50. The attacker can tricking a user to install and run a malicious application to exploit this vulnerability. Successful exploitation may cause the attacker to obtain a higher privilege.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

A privilege escalation vulnerability in Huawei PCManager allows an attacker to gain higher privileges by tricking a user to run a malicious application.

Vulnerability

The vulnerability exists in Huawei PCManager versions prior to 9.0.1.70 (China) and 9.0.1.66 (Oversea) [1]. It is a privilege escalation flaw that can be triggered by an attacker convincing a user to install and run a malicious application.

Exploitation

The attacker must trick the user into installing and executing a malicious application on the target system. No additional authentication or network position is required beyond normal user privileges. The exploit likely leverages a design flaw in PCManager's handling of certain operations, allowing the malicious app to escalate its privileges.

Impact

Successful exploitation grants the attacker a higher privilege level on the affected system, potentially leading to full control over the device.

Mitigation

Huawei released fixed versions: PCManager 9.0.2.20 for China and PCManager 9.0.1.80 for Oversea [1]. Users should upgrade to the respective fixed versions. No workaround is mentioned.

AI Insight generated on May 26, 2026. Synthesized from this CVE's description and the cited reference URLs; citations are validated against the source bundle.

Affected products

2
  • Honojs/PcManagerllm-fuzzy
    Range: <9.0.1.50
  • Huawei/PCManagerv5
    Range: versions earlier than PCManager 9.0.1.50

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

1

News mentions

0

No linked articles in our index yet.