CVE-2020-1882
4.6
Vector
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Exploitability: 0.9 / Impact: 3.6
Source: NVD
Description
Huawei mobile phones Ever-L29B versions earlier than 10.0.0.180(C185E6R3P3), earlier than 10.0.0.180(C432E6R1P7), earlier than 10.0.0.180(C636E5R2P3); HUAWEI Mate 20 RS versions earlier than 10.0.0.175(C786E70R3P8); HUAWEI Mate 20 X versions earlier than 10.0.0.176(C00E70R2P8); and Honor Magic2 versions earlier than 10.0.0.175(C00E59R2P11) have an improper authorization vulnerability. Due to improper authorization of some function, attackers can bypass the authorization to perform some operations.
Affected (6)
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| Before 10.0.0.175\(c786e70r3p8\) |
| Running on/with | Platform Versions |
|---|---|
Huawei Mate 20 Rs | All versions |
Configuration B
| Vulnerable Software | Affected Versions |
|---|---|
| Before 10.0.0.176\(c00e70r2p8\) |
| Running on/with | Platform Versions |
|---|---|
Huawei Mate 20 X | All versions |
Configuration C
| Vulnerable Software | Affected Versions |
|---|---|
| Before 10.0.0.175\(c00e59r2p11\) |
| Running on/with | Platform Versions |
|---|---|
Huawei Honor Magic2 | All versions |
Configuration D
| Vulnerable Software | Affected Versions |
|---|---|
| Before 10.0.0.180\(c185e6r3p3\) |
Configuration E
| Vulnerable Software | Affected Versions |
|---|---|
| Before 10.0.0.180\(c432e6r1p7\) |
Configuration F
| Vulnerable Software | Affected Versions |
|---|---|
| Before 10.0.0.180\(c636e5r2p3\) |
| Running on/with | Platform Versions |
|---|---|
Huawei Ever L29b | All versions |
References (2)
Source: psirt@huawei.com
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Timeline
No history available yet.