FlagThis
← Back to CVE List
Vulnerability Intelligence Report

CVE-2020-9244

HUAWEI Mate 20 versions Versions earlier than 10.1.0.160(C00E160R3P8);HUAWEI Mate 20 Pro versions Versions earlier than 10.1.0.270(C431E7R1P5),Versions earlier than 10.1.0.270(C635E3R1P5),Versions earlier than 10.1.0.273(C636E7R2P4);HUAWEI Mate 20 X versions Versions earlier than 10.1.0.160(C00E160R2P8);HUAWEI P30 versions Versions earlier than 10.1.0.160(C00E160R2P11);HUAWEI P30 Pro versions Versions earlier than 10.1.0.160(C00E160R2P8);HUAWEI Mate 20 RS versions Versions earlier than 10.1.0.160(C786E160R3P8);HonorMagic2 versions Versions earlier than 10.0.0.187(C00E61R2P11);Honor20 versions Versions earlier than 10.0.0.175(C00E58R4P11);Honor20 PRO versions Versions earlier than 10.0.0.194(C00E62R8P12);HonorMagic2 versions Versions earlier than 10.0.0.187(C00E61R2P11);HonorV20 versions Versions earlier than 10.0.0.188(C00E62R2P11) have an improper authentication vulnerability. The system does not properly sign certain encrypted file, the attacker should gain the key used to encrypt the file, successful exploit could cause certain file be forged

No Active Exploit Signals
CVSS Base Score
6.8
MEDIUM
EPSS Probability:0.23%
Executive Threat Verdict
Evaluating...
Evaluating Threat Landscape...
Assessing known weaponization, exploitation telemetry, and federal advisories.
Attack Surface
—
Authentication
—
Weaponization
—
SSVC Action
—

Affected Products & Versions

Vendor Product Affected Versions
huawei mate_20_firmware all
huawei mate_20 all
huawei mate_20_pro_firmware all
huawei mate_20_pro all
huawei mate_20_x_firmware all
huawei mate_20_x all
huawei p30_firmware all
huawei p30 all
huawei p30_pro_firmware all
huawei p30_pro all
huawei mate_20_rs_firmware all
huawei mate_20_rs all
huawei honor_magic_2_firmware all
huawei honor_magic_2 all
huawei honor_20_firmware all
huawei honor_20 all
huawei honor_20_pro_firmware all
huawei honor_20_pro all
huawei honor_v20_firmware all
huawei honor_v20 all

References & Technical Advisories

NVD Listing ↗ MITRE Listing ↗ GitHub Advisory ↗
No reference links found.

Threat Intelligence Signals

EPSS Score
0.234%
GitHub Advisory
GHSA-jx8x-69j8-c7fj ↗

Identity & Timeline

StatusPUBLISHED
Assigning AuthorityHuawei Technologies · Vendor · China
Reserved2020-02-18T00:00:00
Published2020-08-11T18:46:13
Last Updated2024-08-04T10:19:20

Related Intelligence

Related CVEs
CVE-2020-0022 CVSS 8.8 — In reassemble_and_dispatch of packet_fragmenter.cc, there is possible …
CVE-2020-9113 CVSS 8.0 — HUAWEI Mate 20 versions earlier than 10.0.0.188(C00E74R3P8) have a buf…
CVE-2019-5225 CVSS 7.8 — P30, Mate 20, P30 Pro smartphones with software of versions earlier th…
CVE-2020-1796 CVSS 6.6 — There is an improper authorization vulnerability in several smartphone…
CVE-2020-1840 CVSS 6.0 — HUAWEI Mate 20 smart phones with versions earlier than 10.0.0.175(C00E…
LINK COPIED TO CLIPBOARD