Description
There is an insufficient authentication vulnerability in some Huawei smart phone. An unauthenticated, local attacker can crafts software package to exploit this vulnerability. Due to insufficient verification, successful exploitation may impact the service. (Vulnerability ID: HWPSIRT-2019-12302)
This vulnerability has been assigned a Common Vulnerabilities and Exposures (CVE) ID: CVE-2020-9250.
Metrics
CVSS 3.1 3.3/10
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:LWeakness enumeration
Affected software
| Vendor | Product | Versions |
|---|---|---|
| Huawei | HUAWEI Mate 20 Pro | Versions earlier than 10.1.0.160(C00E160R3P8) |
References
- http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200729-01-smartphone-enBroken Link, Vendor Advisory
Timeline
- Published
- Dec 20, 2024
- Last modified
- Jun 17, 2026
- NVD status
- Analyzed