CVEvulnerability

CVE-2020-1803

5.3 MEDIUM Published 2020-04-20 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2020-04-20
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
5.3 MEDIUM — CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS 2.0 ([email protected])
2.9 LOW — AV:A/AC:M/Au:N/C:P/I:N/A:N
Weaknesses
CWE-287

Description

Huawei smartphones Honor V20 with versions earlier than 10.0.0.179(C636E3R4P3),versions earlier than 10.0.0.180(C185E3R3P3),versions earlier than 10.0.0.180(C432E10R3P4) have an information disclosure vulnerability. The device does not sufficiently validate the identity of smart wearable device in certain specific scenario, the attacker need to gain certain information in the victim's smartphone to launch the attack, successful exploit could cause information disclosure.

Affected configurations

• huawei honor v20 firmware (< 10.0.0.179\(c636e3r4p3\)) • huawei honor v20 firmware (< 10.0.0.180\(c185e3r3p3\)) • huawei honor v20 firmware (< 10.0.0.180\(c432e10r3p4\))

Related

Weakness · CWE (1)

  • CWE-287 Improper Authentication weakness

References