← Back

CVE-2020-9089

nvd nist
Published: Dec 27, 2024Modified: Jun 17, 2026

JSON object

Loading...
3.3
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Exploitability: 1.8 / Impact: 1.4
Source: NVD

Description

There is an information vulnerability in Huawei smartphones. A function in a module can be called without verifying the caller's access. Attackers with user access can exploit this vulnerability to obtain some information. This can lead to information leak. (Vulnerability ID: HWPSIRT-2019-12141) This vulnerability has been assigned a Common Vulnerabilities and Exposures (CVE) ID: CVE-2020-9089.

Affected (4)

Huawei
1 product
P30 Pro Firmware
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
P30 Pro Firmware
Before 10.1.0.120\(c431e19r2p5\)
Configuration B
1 vulnerable
Vulnerable SoftwareAffected Versions
P30 Pro Firmware
Before 10.1.0.120\(c432e19r2p5\)
Configuration C
1 vulnerable
Vulnerable SoftwareAffected Versions
P30 Pro Firmware
Before 10.1.0.126\(c10e11r5p1\)
Configuration D
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
P30 Pro Firmware
Before 10.1.0.126\(c461e11r3p1\)
Running on/withPlatform Versions
Huawei
P30 Pro
All versions

Related CWEs

CWE-200
Exposure of Sensitive Information to an Unauthorized Actor
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (1)

Source: psirt@huawei.com
Vendor Advisory

Timeline

No history available yet.