CVE-2020-9080

State: Published
Severity: 7.8 High
Published: Dec 27, 2024
Updated: Dec 27, 2024
Reserved: Feb 18, 2020

Description

There is an improper privilege management vulnerability in Huawei smart phone product. A local, authenticated attacker could craft a specific input to exploit this vulnerability. Successful exploitation may lead to local privilege escalation. (Vulnerability ID: HWPSIRT-2020-05272)

This vulnerability has been assigned a Common Vulnerabilities and Exposures (CVE) ID: CVE-2020-9080.

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	huawei

Weaknesses

CWE-269 Improper Privilege Management

Affected Products

Product	Versions
HUAWEI Mate 20 ProHuawei	10.1.0.135(C01E135R2P8)Affected
HUAWEI Mate 20 Pro (UD)Huawei	10.1.0.135(C00E135R3P8)Affected
HUAWEI nova 5iHuawei	Versions earlier than 10.0.0.125(C01E123R7P3)Affected

References

https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200819-01-smartphone-en

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.