CVEvulnerability

CVE-2020-1838

5.5 MEDIUM Published 2020-07-06 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2020-07-06
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
5.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
CVSS 2.0 ([email protected])
1.9 LOW — AV:L/AC:M/Au:N/C:N/I:P/A:N
Weaknesses
CWE-287

Description

HUAWEI Mate 30 Pro with versions earlier than 10.1.0.150(C00E136R5P3) have is an improper authentication vulnerability. The device does not sufficiently validate certain credential of user's face, an attacker could craft the credential of the user, successful exploit could allow the attacker to pass the authentication with the crafted credential.

Affected configurations

• huawei mate 30 pro firmware (< 10.1.0.150\(c00e136r5p3\))

Related

Weakness · CWE (1)

  • CWE-287 Improper Authentication weakness

References