Lucene search

K
nvd[email protected]NVD:CVE-2020-9202
HistoryDec 24, 2020 - 4:15 p.m.

CVE-2020-9202

2020-12-2416:15:16
CWE-922
web.nvd.nist.gov
3
te mobile
information disclosure
vulnerability

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

CVSS3

4.4

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

AI Score

4.5

Confidence

High

EPSS

0

Percentile

12.6%

There is an information disclosure vulnerability in TE Mobile software versions V600R006C10,V600R006C10SPC100. Due to the improper storage of some information in certain specific scenario, the attacker can gain information in the victim’s device to launch the attack, successful exploit could cause information disclosure.

Affected configurations

Nvd
Node
huaweite_mobileMatchv600r006c10
OR
huaweite_mobileMatchv600r006c10spc100
VendorProductVersionCPE
huaweite_mobilev600r006c10cpe:2.3:a:huawei:te_mobile:v600r006c10:*:*:*:*:*:*:*
huaweite_mobilev600r006c10spc100cpe:2.3:a:huawei:te_mobile:v600r006c10spc100:*:*:*:*:*:*:*

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

CVSS3

4.4

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

AI Score

4.5

Confidence

High

EPSS

0

Percentile

12.6%

Related for NVD:CVE-2020-9202