CVEvulnerability

CVE-2020-9081

6.8 MEDIUM Published 2024-12-27 Modified 2026-06-17 Official page ↗
Status
Analyzed
Published
2024-12-27
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
3.5 LOW — CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
CVSS 3.1 ([email protected])
6.8 MEDIUM — CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-285, CWE-863

Description

There is an improper authorization vulnerability in some Huawei smartphones. An attacker could perform a series of operation in specific mode to exploit this vulnerability. Successful exploit could allow the attacker to bypass app lock. (Vulnerability ID: HWPSIRT-2019-12144) This vulnerability has been assigned a Common Vulnerabilities and Exposures (CVE) ID: CVE-2020-9081.

Affected configurations

• huawei mate 20 firmware (< 10.1.0.160\(c00e160r3p8\)) • huawei p30 firmware (< 10.1.0.160\(c00e160r2p11\)) • huawei p30 pro firmware (< 10.1.0.160\(c00e160r2p8\)) • huawei princeton-al10d firmware (< 10.1.0.160\(c00e160r2p11\)) • huawei yale-al00a firmware (< 10.1.0.160\(c00e160r8p12\)) • huawei yale-al50a firmware (< 10.1.0.88\(c00e88r8p1\)) • huawei yalep-al10b firmware (< 10.1.0.160\(c00e160r8p12\)) • huawei mate 20 firmware (< 10.1.0.160\(c01e160r2p8\)) • huawei p30 pro firmware (< 10.1.0.160\(c01e160r2p8\))

Related

Weakness · CWE (2)

  • CWE-285 Improper Authorization weakness
  • CWE-863 Incorrect Authorization weakness

References