Improper Authentication Vulnerability in Huawei Smartphone
CVE-2020-1878

5.5MEDIUM

Key Information:

Vendor

Huawei
Status
Oxfords-an00a
Vendor
CVE Published:
20 March 2020

What is CVE-2020-1878?

The Huawei OxfordS-AN00A smartphone experiences an improper authentication vulnerability that allows attackers to exploit the device by loading malicious applications. This vulnerability can lead to unauthorized access and potential information leaks, as the device fails to authenticate properly during specific operations. Users are advised to upgrade to the latest software versions to mitigate potential risks associated with this vulnerability.

Affected Version(s)

OxfordS-AN00A Versions earlier than 10.0.1.152D(C735E152R3P3),Versions earlier than 10.0.1.160(C00E160R4P1)

References

https://www.huawei.com/en/psirt/security-advisories/huawe...
x_refsource_MISC
http://www.huawei.com/en/psirt/security-advisories/huawei...
x_refsource_CONFIRM

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.