CVE-2020-9239

Published: Sep 11, 2020Modified: Nov 21, 2024

5.5

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Exploitability: 1.8 / Impact: 3.6

Source: NVD

Description

Huawei smartphones BLA-A09 versions 8.0.0.123(C212),versions earlier than 8.0.0.123(C567),versions earlier than 8.0.0.123(C797);BLA-TL00B versions earlier than 8.1.0.326(C01);Berkeley-L09 versions earlier than 8.0.0.163(C10),versions earlier than 8.0.0.163(C432),Versions earlier than 8.0.0.163(C636),Versions earlier than 8.0.0.172(C10);Duke-L09 versions Duke-L09C10B187, versions Duke-L09C432B189, versions Duke-L09C636B189;HUAWEI P20 versions earlier than 8.0.1.16(C00);HUAWEI P20 Pro versions earlier than 8.1.0.152(C00);Jimmy-AL00A versions earlier than Jimmy-AL00AC00B172;LON-L29D versions LON-L29DC721B192;NEO-AL00D versions earlier than 8.1.0.172(C786);Stanford-AL00 versions Stanford-AL00C00B123;Toronto-AL00 versions earlier than Toronto-AL00AC00B225;Toronto-AL00A versions earlier than Toronto-AL00AC00B225;Toronto-TL10 versions earlier than Toronto-TL10C01B225 have an information vulnerability. A module has a design error that is lack of control of input. Attackers can exploit this vulnerab

Affected (20)

Products: Huawei: Bla A09 Firmware, Bla Tl00b Firmware, Berkeley L09 Firmware, Duke L09 Firmware, P20 Firmware, P20 Pro Firmware, Jimmy Al00a Firmware, Lon L29d Firmware, Neo Al00d Firmware, Stanford Al00 Firmware, Toronto Al00 Firmware, Toronto Al00a Firmware, Toronto Tl10 Firmware

Huawei

13 products

Bla A09 Firmware

Bla Tl00b Firmware

Berkeley L09 Firmware

Stanford Al00 Firmware

Toronto Al00 Firmware

Toronto Al00a Firmware

Toronto Tl10 Firmware

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Huawei Bla A09 Firmware	Version 8.0.0.123(c212)

Configuration B

1 vulnerable

Vulnerable Software	Affected Versions
Huawei Bla A09 Firmware	Before 8.0.0.123\(c567\)

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Bla A09 Firmware	Before 8.0.0.123\(c797\)

Running on/with	Platform Versions
Huawei Bla A09	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Bla Tl00b Firmware	Before 8.1.0.326\(c01\)

Running on/with	Platform Versions
Huawei Bla Tl00b	All versions

Configuration E

1 vulnerable

Vulnerable Software	Affected Versions
Huawei Berkeley L09 Firmware	Before 8.0.0.163\(c10\)

Configuration F

1 vulnerable

Vulnerable Software	Affected Versions
Huawei Berkeley L09 Firmware	Up to 8.0.0.163\(c432\)

Configuration G

1 vulnerable

Vulnerable Software	Affected Versions
Huawei Berkeley L09 Firmware	Before 8.0.0.163\(c636\)

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Berkeley L09 Firmware	Before 8.0.0.172\(c10\)

Running on/with	Platform Versions
Huawei Berkeley L09	All versions

Configuration I

3 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Duke L09 Firmware	Version duke-l09c10b187
Huawei Duke L09 Firmware	Version duke-l09c432b189
Huawei Duke L09 Firmware	Version duke-l09c636b189

Running on/with	Platform Versions
Huawei Duke L09	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei P20 Firmware	Before 8.0.1.16\(c00\)

Running on/with	Platform Versions
Huawei P20	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei P20 Pro Firmware	Before 8.1.0.152\(c00\)

Running on/with	Platform Versions
Huawei P20 Pro	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Jimmy Al00a Firmware	Before jimmy-al00ac00b172

Running on/with	Platform Versions
Huawei Jimmy Al00a	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Lon L29d Firmware	Version lon-l29dc721b192

Running on/with	Platform Versions
Huawei Lon L29d	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Neo Al00d Firmware	Before 8.1.0.172\(c786\)

Running on/with	Platform Versions
Huawei Neo Al00d	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Stanford Al00 Firmware	Version stanford-al00c00b123

Running on/with	Platform Versions
Huawei Stanford Al00	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Toronto Al00 Firmware	Before toronto-al00ac00b225

Running on/with	Platform Versions
Huawei Toronto Al00	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Toronto Al00a Firmware	Before toronto-al00ac00b225

Running on/with	Platform Versions
Huawei Toronto Al00a	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Toronto Tl10 Firmware	Before toronto-tl10c01b225

Running on/with	Platform Versions
Huawei Toronto Tl10	All versions

Related CWEs

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (2)

https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200909-04-smartphone-en

Source: psirt@huawei.com

Vendor Advisory

https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200909-04-smartphone-en

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.