CVEvulnerability

CVE-2020-9250

3.3 LOW Published 2024-12-20 Modified 2026-06-17 Official page ↗
Status
Analyzed
Published
2024-12-20
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
3.3 LOW — CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
Weaknesses
CWE-287, CWE-522

Description

There is an insufficient authentication vulnerability in some Huawei smart phone. An unauthenticated, local attacker can crafts software package to exploit this vulnerability. Due to insufficient verification, successful exploitation may impact the service. (Vulnerability ID: HWPSIRT-2019-12302) This vulnerability has been assigned a Common Vulnerabilities and Exposures (CVE) ID: CVE-2020-9250.

Affected configurations

• huawei mate 20 pro firmware 10.1.0.160\(c00e160r3p8\)

Related

Weakness · CWE (2)

  • CWE-287 Improper Authentication weakness
  • CWE-522 Insufficiently Protected Credentials weakness

References