CVE-2020-1785

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

Mate 10 Pro;Honor V10;Honor 10;Nova 4 smartphones have a denial of service vulnerability. The system does not properly check the status of certain module during certain operations, an attacker should trick the user into installing a malicious application, successful exploit could cause reboot of the smartphone.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Affected software

Vendor	Product	Versions
n/a	Mate 10 Pro;Honor V10;Honor 10;Nova 4	Versions earlier than 9.1.0.321(C605E4R1P13T8); Versions earlier than 9.1.0.321(C636E4R1P14T8); Versions earlier than 9.1.0.330(C432E6R1P12T8); Versions earlier than 9.1.0.333(C00E333R2P1T8); Versions earlier than 9.1.0.350(C636E4R1P13T8); Versions earlier than 9.1.0.351(C432E5R1P13T8); Versions earlier than 9.1.0.350(C10E5R1P14T8); Versions earlier than 9.1.0.350(C185E3R1P12T8); Versions earlier than 9.1.0.350(C461E3R1P11T8); Versions earlier than 9.1.0.350(C636E3R1P13T8); Versions earlier than 9.1.0.225(C636E1R4P1)

References

https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200102-03-smartphone-enVendor Advisory
https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200102-03-smartphone-enVendor Advisory

Timeline

Published: Jan 3, 2020
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2020

CVE-2020-17864.6HUAWEI Mate 20 Pro smartphones versions earlier than 10.0.0.175(C00E69R3P8) have an improper authentication vulnerability. The software does CVE-2020-17876.6HUAWEI Mate 20 smartphones versions earlier than 9.1.0.139(C00E133R3P1) have an improper authentication vulnerability. The system has a logi CVE-2020-17885.5Honor V30 smartphones with versions earlier than 10.0.1.135(C00E130R4P1) have an improper authentication vulnerability. Certain applications CVE-2020-17896.8Huawei OSCA-550, OSCA-550A, OSCA-550AX, and OSCA-550X products with version 1.0.1.21(SP3) have an insufficient authentication vulnerability.CVE-2020-178916.1TP-Link Archer C1200 firmware version 1.13 Build 2018/01/24 rel.52299 EU has a XSS vulnerability allowing a remote attacker to execute arbit CVE-2020-17908.8GaussDB 200 with version of 6.5.1 have a command injection vulnerability. The software constructs part of a command using external input fro CVE-2020-179016.5Cross-site request forgery (CSRF) in PbootCMS 1.3.2 allows attackers to change the password of a user.CVE-2020-17912.4HUAWEI Mate 20 smartphones with versions earlier than 10.0.0.185(C00E74R3P8) have an improper authorization vulnerability. The system has a CVE-2020-17925.5Honor V10 smartphones with versions earlier than BKL-AL20 10.0.0.156(C00E156R2P4) and versions earlier than BKL-L09 10.0.0.146(C432E4R1P4) h CVE-2020-17934.6There is an improper authentication vulnerability in several smartphones. The applock does not perform a sufficient authentication in certai CVE-2020-17944.6There is an improper authentication vulnerability in several smartphones. The applock does not perform a sufficient authentication in certai CVE-2020-17952.4There is a logic error vulnerability in several smartphones. The software does not properly restrict certain operation when the Digital Bala