CVEvulnerability

CVE-2020-1878

5.5 MEDIUM Published 2020-03-20 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2020-03-20
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
5.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS 2.0 ([email protected])
2.1 LOW — AV:L/AC:L/Au:N/C:P/I:N/A:N
Weaknesses
CWE-287

Description

Huawei smartphone OxfordS-AN00A with versions earlier than 10.0.1.152D(C735E152R3P3),versions earlier than 10.0.1.160(C00E160R4P1) have an improper authentication vulnerability. Authentication to target component is improper when device performs an operation. Attackers exploit this vulnerability to obtain some information by loading malicious application, leading to information leak.

Affected configurations

• huawei oxfords-an00a firmware (> 10.0.1.152d\(c735e152r3p3\) < 10.0.1.160\(c00e160r4p1\)) • huawei oxfords-an00a firmware (< 10.0.1.152d\(c735e152r3p3\))

Related

Weakness · CWE (1)

  • CWE-287 Improper Authentication weakness

References