CVE-2020-9073
2.4
Vector
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Exploitability: 0.9 / Impact: 1.4
Source: NVD
Description
Huawei P20 smartphones with versions earlier than 10.0.0.156(C00E156R1P4) have an improper authentication vulnerability. The vulnerability is due to that when an user wants to do certain operation, the software insufficiently validate the user's identity. Attackers need to physically access the smartphone to exploit this vulnerability. Successful exploit could allow the attacker to bypass the limit of student mode function.
Affected (1)
Products: Huawei: P20 Firmware
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| Before 10.0.0.156\(c00e156r1p4\) |
| Running on/with | Platform Versions |
|---|---|
Huawei P20 | All versions |
References (2)
Source: psirt@huawei.com
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Timeline
No history available yet.