CVEvulnerability

CVE-2020-9076

6.8 MEDIUM Published 2020-06-15 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2020-06-15
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
6.8 MEDIUM — CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N
CVSS 2.0 ([email protected])
4.0 MEDIUM — AV:N/AC:H/Au:N/C:P/I:P/A:N
Weaknesses
CWE-287

Description

HUAWEI P30;HUAWEI P30 Pro;Tony-AL00B smartphones with versions earlier than 10.1.0.135(C00E135R2P11); versions earlier than 10.1.0.135(C00E135R2P8), versions earlier than 10.1.0.135 have an improper authentication vulnerability. Due to the identity of the message sender not being properly verified, an attacker can exploit this vulnerability through man-in-the-middle attack to induce user to access malicious URL.

Affected configurations

• huawei p30 firmware (< 10.1.0.135\(c00e135r2p11\)) • huawei p30 pro firmware (< 10.1.0.135\(c00e135r2p8\)) • huawei p30 pro firmware (< 10.1.0.135\(c01e135r2p8\)) • huawei tony-al00b firmware (< 10.1.0.137\(c00e137r2p11\))

Related

Weakness · CWE (1)

  • CWE-287 Improper Authentication weakness

References