CVE-2020-1798
HUAWEI P30 smartphones with versions earlier than 10.1.0.135(C00E135R2P11) have an improper authentication vulnerability. A logic error occurs when handling NFC work, an attacker should establish a NFC connection to the target phone, and then do a series of operations on the target phone. Successful exploit could allow a guest user do certain operation which is beyond the guest user's privilege.
- Score
- CVSS 3.1 4.6 Medium
- Status
- Modified - psirt@huawei.com
- Published
- 2020-05-29
- Last modified
- 2024-08-04
- Weaknesses
- CWE-287
Affected products
References
- https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200527-02-smartphone-en