CVE-2020-1793

There is an improper authentication vulnerability in several smartphones. The applock does not perform a sufficient authentication in certain scenarios, successful exploit could allow the attacker to gain certain data of the application which is locked. Affected product versions include:HUAWEI Mate 20 versions Versions earlier than 10.0.0.188(C00E74R3P8);HUAWEI Mate 30 Pro versions Versions earlier than 10.0.0.203(C00E202R7P2).

Score

CVSS 3.1 4.6 Medium

Status

Modified - psirt@huawei.com

Published

2020-03-20

Last modified

2024-08-04

Weaknesses

CWE-287

Affected products

• Mate 20 Firmware (Huawei)
• Mate 30 Pro Firmware (Huawei)

References

• https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200318-02-smartphone-en