Path Traversal Vulnerability in HUAWEI Mate 20 and Honor Magic2 Smartphones
CVE-2020-9252

2.3LOW

Key Information:

Vendor
Huawei
Status
Huawei Mate 20
Huawei Mate 20 X
Huawei Mate 20 Rs
Honor Magic2
Vendor
CVE Published:
17 July 2020

Summary

Multiple HUAWEI smartphone models, including the Mate 20, Mate 20 X, and Honor Magic2, have a path traversal vulnerability. This issue arises from inadequate validation of certain pathname inputs from specific processes, which could be exploited by attackers. A successful attack may enable unauthorized file writing to specified paths within the system, potentially compromising user data and device integrity.

Affected Version(s)

Honor Magic2 Versions earlier than 10.1.0.160(C00E160R2P11)

HUAWEI Mate 20 Versions earlier than 10.1.0.160(C00E160R3P8)

HUAWEI Mate 20 RS Versions earlier than 10.1.0.160(C786E160R3P8)

References

https://www.huawei.com/en/psirt/security-advisories/huawe...
x_refsource_CONFIRM

CVSS V3.1

Score:
2.3
Severity:
LOW
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.