CVE-2020-9076

MediumCVSS 6.8/10Last modified Jun 17, 2026

Description

HUAWEI P30;HUAWEI P30 Pro;Tony-AL00B smartphones with versions earlier than 10.1.0.135(C00E135R2P11); versions earlier than 10.1.0.135(C00E135R2P8), versions earlier than 10.1.0.135 have an improper authentication vulnerability. Due to the identity of the message sender not being properly verified, an attacker can exploit this vulnerability through man-in-the-middle attack to induce user to access malicious URL.

Metrics

CVSS 3.1 6.8/10CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N

Weakness enumeration

CWE-287

Affected software

No affected versions have been published.

Timeline

Published: Jun 15, 2020
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2020

CVE-2020-90773.3HUAWEI P30 smart phones with versions earlier than 10.1.0.160(C00E160R2P11) have an information exposure vulnerability. The system does not CVE-2020-90787.8FusionCompute 8.0.0 have local privilege escalation vulnerability. A local, authenticated attacker could perform specific operations to expl CVE-2020-90798.8FusionSphere OpenStack 8.0.0 have a protection mechanism failure vulnerability. The product incorrectly uses a protection mechanism. An atta CVE-2020-90807.8There is an improper privilege management vulnerability in Huawei smart phone product. A local, authenticated attacker could craft a specifi CVE-2020-90816.8There is an improper authorization vulnerability in some Huawei smartphones. An attacker could perform a series of operation in specific mod CVE-2020-90824.6There is an information disclosure vulnerability in several smartphones. The system has a logic judging error under certain scenario, the at CVE-2020-90832.4HUAWEI Mate 20 smart phones with Versions earlier than 10.1.0.163(C00E160R3P8) have a denial of service (DoS) vulnerability. The attacker ca CVE-2020-90846.5Taurus-AN00B versions earlier than 10.1.0.156(C00E155R7P2) have a use-after-free (UAF) vulnerability. An authenticated, local attacker may p CVE-2020-90855.3There is a NULL pointer dereference vulnerability in some Huawei products. An attacker may send specially crafted POST messages to the affec CVE-2020-90864.3There is a buffer error vulnerability in some Huawei product. An unauthenticated attacker may send special UPNP message to the affected prod CVE-2020-90875.5Taurus-AL00A version 10.0.0.1(C00E1R1P1) has an out-of-bounds read vulnerability in XFRM module. An authenticated, local attacker may perfor CVE-2020-90893.3There is an information vulnerability in Huawei smartphones. A function in a module can be called without verifying the caller's access. Att