Lucene search

K
huaweiHuawei TechnologiesHUAWEI-SA-20200603-01-SMARTPHONE
HistoryJun 03, 2020 - 12:00 a.m.

Security Advisory - Improper Handling of Exceptional Condition Vulnerability in Huawei Smartphones

2020-06-0300:00:00
Huawei Technologies
www.huawei.com
44

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

5.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

0.001 Low

EPSS

Percentile

39.5%

There is an improper handling of exceptional condition Vulnerability in Huawei Smartphones. A component cannot deal with an exception correctly. Attackers can exploit this vulnerability by sending malformed message. This could compromise normal service of affected phones. (Vulnerability ID: HWPSIRT-2019-10071)

This vulnerability has been assigned a Common Vulnerabilities and Exposures (CVE) ID: CVE-2020-9074.

Huawei has released software updates to fix this vulnerability. This advisory is available at the following link:

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200603-01-en

Affected configurations

Vulners
Node
huaweihonor_20Range<10.0.0.194
OR
huaweihonor_20Range<10.0.0.194
OR
huaweihonor_20Range<10.0.0.194
OR
huaweihonor_20Range<10.0.0.194
OR
huaweihonor_view_20Range<10.0.0.200
OR
huaweihonor_view_20Range<10.0.0.201
OR
huaweihonor_view_20Range<10.0.0.195
OR
huaweihonor_view_20Range<10.0.0.201
OR
huaweihonor_20Range<10.0.0.186
OR
huaweihonor_20Range<10.0.0.194

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

5.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

0.001 Low

EPSS

Percentile

39.5%

Related for HUAWEI-SA-20200603-01-SMARTPHONE