CVE-2020-1803

5.3MEDIUM

Key Information:

Vendor
Huawei
Status
Honor V20
Vendor
CVE Published:
20 April 2020

Summary

Huawei smartphones Honor V20 with versions earlier than 10.0.0.179(C636E3R4P3),versions earlier than 10.0.0.180(C185E3R3P3),versions earlier than 10.0.0.180(C432E10R3P4) have an information disclosure vulnerability. The device does not sufficiently validate the identity of smart wearable device in certain specific scenario, the attacker need to gain certain information in the victim's smartphone to launch the attack, successful exploit could cause information disclosure.

Affected Version(s)

Honor V20 Versions earlier than 10.0.0.179(C636E3R4P3)

Honor V20 Versions earlier than 10.0.0.180(C185E3R3P3)

Honor V20 Versions earlier than 10.0.0.180(C432E10R3P4)

References

http://www.huawei.com/en/psirt/security-advisories/huawei...
x_refsource_CONFIRM
https://www.huawei.com/en/psirt/security-advisories/huawe...
x_refsource_CONFIRM

CVSS V3.1

Score:
5.3
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Adjacent Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.