CVE-2020-9250

State: Published
Severity: 3.3 Low
Published: Dec 20, 2024
Updated: Dec 20, 2024
Reserved: Feb 18, 2020

Description

There is an insufficient authentication vulnerability in some Huawei smart phone. An unauthenticated, local attacker can crafts software package to exploit this vulnerability. Due to insufficient verification, successful exploitation may impact the service. (Vulnerability ID: HWPSIRT-2019-12302)

This vulnerability has been assigned a Common Vulnerabilities and Exposures (CVE) ID: CVE-2020-9250.

Scores

CVSS	Score	Vector	Source
3.1	3.3 Low	CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L	huawei

Weaknesses

CWE-287 Improper Authentication
CWE-522 Insufficiently Protected Credentials

Affected Products

Product	Versions
HUAWEI Mate 20 ProHuawei	Versions earlier than 10.1.0.160(C00E160R3P8)Affected

References

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200729-01-smartphone-en

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.