CVE-2020-9066

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Huawei smartphones OxfordP-AN10B with versions earlier than 10.0.1.169(C00E166R4P1) have an improper authentication vulnerability. The Application doesn't perform proper authentication when user performs certain operations. An attacker can trick user into installing a malicious plug-in to exploit this vulnerability. Successful exploit could allow the attacker to bypass the authentication to perform unauthorized operations.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-287

Affected software

Vendor	Product	Versions
n/a	OxfordP-AN10B	Versions earlier than 10.0.1.169(C00E166R4P1)

References

https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200325-01-phoneVendor Advisory
https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200325-01-phoneVendor Advisory

Timeline

Published: Mar 26, 2020
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2020

CVE-2020-90678.0There is a buffer overflow vulnerability in some Huawei products. The vulnerability can be exploited by an attacker to perform remote code e CVE-2020-90689.8Huawei AR3200 products with versions of V200R007C00SPC900, V200R007C00SPCa00, V200R007C00SPCb00, V200R007C00SPCc00, V200R009C00SPC500 have a CVE-2020-90696.5There is an information leakage vulnerability in some Huawei products. An unauthenticated, adjacent attacker could exploit this vulnerabilit CVE-2020-90705.5Huawei smartphones Taurus-AL00B with versions earlier than 10.0.0.205(C00E201R7P2) have an improper authentication vulnerability. The softwa CVE-2020-90716.5There is a few bytes out-of-bounds read vulnerability in some Huawei products. The software reads data past the end of the intended buffer w CVE-2020-90726.7Huawei OSD product with versions earlier than OSD_uwp_9.0.32.0 have a local privilege escalation vulnerability. An authenticated, local atta CVE-2020-90732.4Huawei P20 smartphones with versions earlier than 10.0.0.156(C00E156R1P4) have an improper authentication vulnerability. The vulnerability i CVE-2020-90745.3Huawei Smartphones HONOR 20 PRO;Honor View 20;HONOR 20 have an improper handling of exceptional condition Vulnerability. A component cannot CVE-2020-90756.5Huawei products Secospace USG6300;USG6300E with versions of V500R001C30,V500R001C50,V500R001C60,V500R001C80,V500R005C00,V500R005C10;V600R006 CVE-2020-90766.8HUAWEI P30;HUAWEI P30 Pro;Tony-AL00B smartphones with versions earlier than 10.1.0.135(C00E135R2P11); versions earlier than 10.1.0.135(C00E1 CVE-2020-90773.3HUAWEI P30 smart phones with versions earlier than 10.1.0.160(C00E160R2P11) have an information exposure vulnerability. The system does not CVE-2020-90787.8FusionCompute 8.0.0 have local privilege escalation vulnerability. A local, authenticated attacker could perform specific operations to expl