CVE-2020-9259

2020-07-1722:53:06

huawei

www.cve.org

AI Score

6.3

Confidence

High

EPSS

0.002

Percentile

51.9%

JSON

Huawei Honor V30 smartphones with versions earlier than 10.1.0.212(C00E210R5P1) have an improper authentication vulnerability. The system does not sufficiently validate certain parameter passed from the bottom level, the attacker should trick the user into installing a malicious application and control the bottom level, successful exploit could cause information disclosure.

CNA Affected

[
  {
    "product": "Honor V30",
    "vendor": "Huawei",
    "versions": [
      {
        "status": "affected",
        "version": "Versions earlier than 10.1.0.212(C00E210R5P1)"
      }
    ]
  }
]

References

www.huawei.com/en/psirt/security-advisories/huawei-sa-20200715-02-smartphone-en