← Back

CVE-2020-9250

nvd nist
Published: Dec 20, 2024Modified: Jun 17, 2026

JSON object

Loading...
3.3
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
Exploitability: 1.8 / Impact: 1.4
Source: psirt@huawei.com (Secondary)

Description

There is an insufficient authentication vulnerability in some Huawei smart phone. An unauthenticated, local attacker can crafts software package to exploit this vulnerability. Due to insufficient verification, successful exploitation may impact the service. (Vulnerability ID: HWPSIRT-2019-12302) This vulnerability has been assigned a Common Vulnerabilities and Exposures (CVE) ID: CVE-2020-9250.

Affected (1)

Huawei
1 product
Mate 20 Pro Firmware
Configuration A
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Mate 20 Pro Firmware
Version 10.1.0.160(c00e160r3p8)
Running on/withPlatform Versions
Huawei
Mate 20 Pro
All versions

Related CWEs

CWE-287
Improper Authentication
When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.
CWE-522
Insufficiently Protected Credentials
The product transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval.

References (1)

Source: psirt@huawei.com
Broken LinkVendor Advisory

Timeline

No history available yet.