CVE-2020-1878

5.5MEDIUM

Key Information:

Vendor
Huawei
Status
Oxfords-an00a
Vendor
CVE Published:
20 March 2020

Summary

Huawei smartphone OxfordS-AN00A with versions earlier than 10.0.1.152D(C735E152R3P3),versions earlier than 10.0.1.160(C00E160R4P1) have an improper authentication vulnerability. Authentication to target component is improper when device performs an operation. Attackers exploit this vulnerability to obtain some information by loading malicious application, leading to information leak.

Affected Version(s)

OxfordS-AN00A Versions earlier than 10.0.1.152D(C735E152R3P3),Versions earlier than 10.0.1.160(C00E160R4P1)

References

https://www.huawei.com/en/psirt/security-advisories/huawe...
x_refsource_MISC
http://www.huawei.com/en/psirt/security-advisories/huawei...
x_refsource_CONFIRM

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.