Lucene search

HuaweiCVE-2020-9260

HistoryJul 10, 2020 - 2:15 p.m.

CVE-2020-9260

2020-07-1014:15:10

huawei

web.nvd.nist.gov

cve

2020-9260

huawei p30

huawei p30 pro

smartphone

vulnerability

information disclosure

wi-fi

attack

nvd

CVSS2

3.3

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:A/AC:L/Au:N/C:P/I:N/A:N

CVSS3

6.5

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

AI Score

6.1

Confidence

High

EPSS

0.001

Percentile

30.6%

JSON

HUAWEI P30 and HUAWEI P30 Pro smartphones with versions earlier than 10.1.0.123(C432E22R2P5) and versions earlier than 10.1.0.160(C00E160R2P8) have an information disclosure vulnerability. Certain WI-FI function’s default configuration in the system seems insecure, an attacker should craft a WI-FI hotspot to launch the attack. Successful exploit could cause information disclosure.

Affected configurations

Nvd

Vulners

Node

huaweip30_firmwareRange<10.1.0.123\(c432e22r2p5\)

AND

huaweip30Match-

Node

huaweip30_pro_firmwareRange<10.1.0.160\(c00e160r2p8\)

AND

huaweip30_proMatch-

VendorProductVersionCPE
huaweip30_firmware*cpe:2.3:o:huawei:p30_firmware:*:*:*:*:*:*:*:*
huaweip30-cpe:2.3:h:huawei:p30:-:*:*:*:*:*:*:*
huaweip30_pro_firmware*cpe:2.3:o:huawei:p30_pro_firmware:*:*:*:*:*:*:*:*
huaweip30_pro-cpe:2.3:h:huawei:p30_pro:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
huawei	p30_firmware	*	cpe:2.3:o:huawei:p30_firmware::::::::
huawei	p30	-	cpe:2.3:h:huawei:p30:-:::::::*
huawei	p30_pro_firmware	*	cpe:2.3:o:huawei:p30_pro_firmware::::::::
huawei	p30_pro	-	cpe:2.3:h:huawei:p30_pro:-:::::::*

CNA Affected

[
  {
    "product": "HUAWEI P30;HUAWEI P30 Pro",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Versions earlier than 10.1.0.123(C432E22R2P5)"
      },
      {
        "status": "affected",
        "version": "Versions earlier than 10.1.0.160(C00E160R2P8)"
      }
    ]
  }
]

References

www.huawei.com/en/psirt/security-advisories/huawei-sa-20200708-01-smartphone-en

CVSS2

3.3

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:A/AC:L/Au:N/C:P/I:N/A:N

CVSS3

6.5

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

AI Score

6.1

Confidence

High

EPSS

0.001

Percentile

30.6%

JSON

Related for CVE-2020-9260