CVE-2020-9081

State: Published
Severity: 3.5 Low
Published: Dec 27, 2024
Updated: Dec 27, 2024
Reserved: Feb 18, 2020

Description

There is an improper authorization vulnerability in some Huawei smartphones. An attacker could perform a series of operation in specific mode to exploit this vulnerability. Successful exploit could allow the attacker to bypass app lock. (Vulnerability ID: HWPSIRT-2019-12144)

This vulnerability has been assigned a Common Vulnerabilities and Exposures (CVE) ID: CVE-2020-9081.

Scores

CVSS	Score	Vector	Source
3.1	3.5 Low	CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N	huawei

Weaknesses

CWE-285 Improper Authorization

Affected Products

Product	Versions
HUAWEI Mate 20Huawei	Versions earlier than 10.1.0.160(C00E160R3P8)Affected Versions earlier than 10.1.0.160(C01E160R2P8)Affected
HUAWEI P30Huawei	Versions earlier than 10.1.0.160(C00E160R2P11)Affected
HUAWEI P30 ProHuawei	Versions earlier than 10.1.0.160(C00E160R2P8)Affected Versions earlier than 10.1.0.160(C01E160R2P8)Affected
Princeton-AL10DHuawei	Versions earlier than 10.1.0.160(C00E160R2P11)Affected
Yale-AL00AHuawei	Versions earlier than 10.1.0.160(C00E160R8P12)Affected
Yale-AL50AHuawei	Versions earlier than 10.1.0.88(C00E88R8P1)Affected
YaleP-AL10BHuawei	Versions earlier than 10.1.0.160(C00E160R8P12)Affected

References

https://www.huawei.com/en/psirt/security-advisories/2020/huawei-sa-20200826-15-smartphone-en

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.