CVE-2020-9119
6.2
Vector
CVSS:3.1/AV:P/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Exploitability: 0.3 / Impact: 5.9
Source: NVD
Description
There is a privilege escalation vulnerability on some Huawei smart phones due to design defects. The attacker needs to physically contact the mobile phone and obtain higher privileges, and execute relevant commands, resulting in the user's privilege promotion.
Affected (5)
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| Before 10.0.0.189\(c185e6r1p3\) |
| Running on/with | Platform Versions |
|---|---|
Huawei Mate 10 | All versions |
Configuration B
| Vulnerable Software | Affected Versions |
|---|---|
| Before 10.1.0.156\(c00e155r7p2\) |
| Running on/with | Platform Versions |
|---|---|
Huawei Mate 30 | All versions |
Configuration C
| Vulnerable Software | Affected Versions |
|---|---|
| Before 10.1.0.156\(c00e156r7p2\) |
| Running on/with | Platform Versions |
|---|---|
Huawei Mate 30 Pro | All versions |
Configuration D
| Vulnerable Software | Affected Versions |
|---|---|
| Before 10.1.0.150\(sp1c00e150r4p1\) |
| Running on/with | Platform Versions |
|---|---|
Huawei P40 | All versions |
Configuration E
| Vulnerable Software | Affected Versions |
|---|---|
| Before 10.1.0.150\(sp1c00e150r4p1\) |
| Running on/with | Platform Versions |
|---|---|
Huawei P40 Pro | All versions |
References (2)
Source: psirt@huawei.com
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Timeline
No history available yet.