Lucene search

Huawei TechnologiesHUAWEI-SA-20201209-01-INFORMATIONLEAK

HistoryDec 09, 2020 - 12:00 a.m.

Security Advisory - Information Disclosure Vulnerability in TE Mobile Software

2020-12-0900:00:00

Huawei Technologies

www.huawei.com

security advisory

information disclosure

te mobile software

vulnerability

improper storage

attack

exploit

cve-2020-9202

huawei

software updates

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

CVSS3

4.4

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

EPSS

Percentile

12.6%

JSON

There is an information disclosure vulnerability in TE Mobile software. Due to the improper storage of some information in certain specific scenario, the attacker can gain information in the victim’s device to launch the attack, successful exploit could cause information disclosure. (Vulnerability ID: HWPSIRT-2020-06156)

This vulnerability has been assigned a Common Vulnerabilities and Exposures (CVE) ID: CVE-2020-9202.

Huawei has released software updates to fix this vulnerability. This advisory is available at the following link:

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20201209-01-informationleak-en

Affected configurations

Vulners

Node

huaweite_mobileMatchv600r006c10

huaweite_mobileMatchv600r006c10spc100

VendorProductVersionCPE
huaweite_mobilev600r006c10cpe:2.3:a:huawei:te_mobile:v600r006c10:*:*:*:*:*:*:*
huaweite_mobilev600r006c10spc100cpe:2.3:a:huawei:te_mobile:v600r006c10spc100:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
huawei	te_mobile	v600r006c10	cpe:2.3:a:huawei:te_mobile:v600r006c10:::::::*
huawei	te_mobile	v600r006c10spc100	cpe:2.3:a:huawei:te_mobile:v600r006c10spc100:::::::*

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

CVSS3

4.4

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

EPSS

Percentile

12.6%

JSON

Related for HUAWEI-SA-20201209-01-INFORMATIONLEAK