CVE-2020-9080

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

There is an improper privilege management vulnerability in Huawei smart phone product. A local, authenticated attacker could craft a specific input to exploit this vulnerability. Successful exploitation may lead to local privilege escalation. (Vulnerability ID: HWPSIRT-2020-05272)

This vulnerability has been assigned a Common Vulnerabilities and Exposures (CVE) ID: CVE-2020-9080.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-269

Affected software

Vendor	Product	Versions
Huawei	HUAWEI Mate 20 Pro	10.1.0.135(C01E135R2P8)
Huawei	HUAWEI Mate 20 Pro (UD)	10.1.0.135(C00E135R3P8)
Huawei	HUAWEI nova 5i	Versions earlier than 10.0.0.125(C01E123R7P3)

References

https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200819-01-smartphone-enVendor Advisory

Timeline

Published: Dec 27, 2024
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2020

CVE-2020-90816.8There is an improper authorization vulnerability in some Huawei smartphones. An attacker could perform a series of operation in specific mod CVE-2020-90824.6There is an information disclosure vulnerability in several smartphones. The system has a logic judging error under certain scenario, the at CVE-2020-90832.4HUAWEI Mate 20 smart phones with Versions earlier than 10.1.0.163(C00E160R3P8) have a denial of service (DoS) vulnerability. The attacker ca CVE-2020-90846.5Taurus-AN00B versions earlier than 10.1.0.156(C00E155R7P2) have a use-after-free (UAF) vulnerability. An authenticated, local attacker may p CVE-2020-90855.3There is a NULL pointer dereference vulnerability in some Huawei products. An attacker may send specially crafted POST messages to the affec CVE-2020-90864.3There is a buffer error vulnerability in some Huawei product. An unauthenticated attacker may send special UPNP message to the affected prod CVE-2020-90875.5Taurus-AL00A version 10.0.0.1(C00E1R1P1) has an out-of-bounds read vulnerability in XFRM module. An authenticated, local attacker may perfor CVE-2020-90893.3There is an information vulnerability in Huawei smartphones. A function in a module can be called without verifying the caller's access. Att CVE-2020-90907.8FusionAccess version 6.5.1 has an improper authorization vulnerability. A command is authorized with incorrect privilege. Attackers with oth CVE-2020-90915.5Taurus-AN00B versions earlier than 10.1.0.156(C00E155R7P2) have an out-of-bounds read and write vulnerability. Some functions do not verify CVE-2020-90924.6HUAWEI Mate 20 versions earlier than 10.1.0.163(C00E160R3P8) have a JavaScript injection vulnerability. A module does not verify a specific CVE-2020-90935.5There is a use after free vulnerability in Taurus-AL00A versions 10.0.0.1(C00E1R1P1). A module does not deal with specific message properly,