Lucene search

[email protected]CVE-2020-1808

HistoryMay 15, 2020 - 2:15 p.m.

CVE-2020-1808

2020-05-1514:15:11

CWE-125

[email protected]

web.nvd.nist.gov

cve-2020-1808

honor

huawei

smartphones

out of bound read vulnerability

information disclosure

nvd

5.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:N/A:P

7.1 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H

6.6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

29.2%

JSON

Honor 20;HONOR 20 PRO;Honor Magic2;HUAWEI Mate 20 X;HUAWEI P30;HUAWEI P30 Pro;Honor View 20 smartphones with versions earlier than 10.0.0.187(C00E60R4P11); versions earlier than 10.0.0.187(C00E60R4P11); versions earlier than 10.0.0.176(C00E60R2P11);9.1.0.135(C00E133R2P1); versions earlier than 10.1.0.123(C431E22R3P5), versions earlier than 10.1.0.126(C636E5R3P4), versions earlier than 10.1.0.160(C00E160R2P11); versions earlier than 10.1.0.126(C185E8R5P1), versions earlier than 10.1.0.126(C636E9R2P4), versions earlier than 10.1.0.160(C00E160R2P8); versions earlier than 10.0.0.179(C636E3R4P3), versions earlier than 10.0.0.180(C185E3R3P3), versions earlier than 10.0.0.180(C432E10R3P4), versions earlier than 10.0.0.181(C675E5R1P2) have an out of bound read vulnerability. The software reads data past the end of the intended buffer. The attacker tricks the user into installing a crafted application, successful exploit may cause information disclosure or service abnormal.

Affected configurations

NVD

Node

huaweihonor_view_20Match-

AND

huaweihonor_view_20_firmwareRange<10.0.0.179\(c636e3r4p3\)

Node

huaweihonor_view_20Match-

AND

huaweihonor_view_20_firmwareRange<10.0.0.180\(c185e3r3p3\)

Node

huaweihonor_view_20Match-

AND

huaweihonor_view_20_firmwareRange<10.0.0.180\(c432e10r3p4\)

Node

huaweihonor_view_20Match-

AND

huaweihonor_view_20_firmwareRange<10.0.0.188\(c00e62r2p11\)

Node

huaweihonor_20Match-

AND

huaweihonor_20_firmwareRange<10.0.0.187\(c00e60r4p11\)

Node

huaweihonor_20_proMatch-

AND

huaweihonor_20_pro_firmwareRange<10.0.0.187\(c00e60r4p11\)

Node

huaweihonor_magic2Match-

AND

huaweihonor_magic2_firmwareRange<10.0.0.176\(c00e60r2p11\)

CPENameOperatorVersion
huawei:honor_view_20_firmwarehuawei honor view 20 firmwarelt10.0.0.179\(c636e3r4p3\)

CPE	Name	Operator	Version
huawei:honor_view_20_firmware	huawei honor view 20 firmware	lt	10.0.0.179\(c636e3r4p3\)

CNA Affected

[
  {
    "product": "Honor 20;HONOR 20 PRO;Honor Magic2;HUAWEI Mate 20 X;HUAWEI P30;HUAWEI P30 Pro;Honor View 20",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Versions earlier than 10.0.0.187(C00E60R4P11)"
      },
      {
        "status": "affected",
        "version": "Versions earlier than 10.0.0.176(C00E60R2P11)"
      },
      {
        "status": "affected",
        "version": "9.1.0.135(C00E133R2P1)"
      },
      {
        "status": "affected",
        "version": "Versions earlier than 10.1.0.123(C431E22R3P5),Versions earlier than 10.1.0.126(C636E5R3P4),Versions earlier than 10.1.0.160(C00E160R2P11)"
      },
      {
        "status": "affected",
        "version": "Versions earlier than 10.1.0.126(C185E8R5P1),Versions earlier than 10.1.0.126(C636E9R2P4),Versions earlier than 10.1.0.160(C00E160R2P8)"
      },
      {
        "status": "affected",
        "version": "Versions earlier than 10.0.0.179(C636E3R4P3),Versions earlier than 10.0.0.180(C185E3R3P3),Versions earlier than 10.0.0.180(C432E10R3P4),Versions earlier than 10.0.0.181(C675E5R1P2)"
      }
    ]
  }
]

References

www.huawei.com/en/psirt/security-advisories/huawei-sa-20200513-02-smartphone-en

5.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:N/A:P

7.1 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H

6.6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

29.2%

JSON

Related for CVE-2020-1808

cvelist1 prion1 nvd1 huawei1