Information Vulnerability in Huawei Smartphones and Devices
CVE-2020-9239

5.5MEDIUM

Key Information:

Vendor
Huawei
Status
Bla-a09;bla-tl00b;berkeley-l09;duke-l09;huawei P20;huawei P20 Pro;jimmy-al00a;lon-l29d;neo-al00d;stanford-al00;toronto-al00;toronto-al00a;toronto-tl10
Vendor
CVE Published:
11 September 2020

Summary

Certain Huawei smartphones exhibit an information vulnerability due to a design flaw characterized by inadequate input control. This shortcoming could allow malicious actors to exploit the vulnerability, potentially leading to unauthorized access or manipulation of sensitive information. Devices including various model versions of the Huawei P20 series and others are specifically affected, highlighting the importance of maintaining updated software to mitigate such risks.

Affected Version(s)

BLA-A09;BLA-TL00B;Berkeley-L09;Duke-L09;HUAWEI P20;HUAWEI P20 Pro;Jimmy-AL00A;LON-L29D;NEO-AL00D;Stanford-AL00;Toronto-AL00;Toronto-AL00A;Toronto-TL10 8.0.0.123(C212),Versions earlier than 8.0.0.123(C567),Versions earlier than 8.0.0.123(C797)

BLA-A09;BLA-TL00B;Berkeley-L09;Duke-L09;HUAWEI P20;HUAWEI P20 Pro;Jimmy-AL00A;LON-L29D;NEO-AL00D;Stanford-AL00;Toronto-AL00;Toronto-AL00A;Toronto-TL10 Versions earlier than 8.1.0.326(C01)

BLA-A09;BLA-TL00B;Berkeley-L09;Duke-L09;HUAWEI P20;HUAWEI P20 Pro;Jimmy-AL00A;LON-L29D;NEO-AL00D;Stanford-AL00;Toronto-AL00;Toronto-AL00A;Toronto-TL10 Versions earlier than 8.0.0.163(C10),Versions earlier than 8.0.0.163(C432),Versions earlier than 8.0.0.163(C636),Versions earlier than 8.0.0.172(C10)

References

https://www.huawei.com/en/psirt/security-advisories/huawe...
x_refsource_MISC

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.