CVE-2020-1800

HUAWEI smartphones P30 with versions earlier than 10.0.0.185(C00E85R1P11) have an improper access control vulnerability. The software incorrectly restricts access to a function interface from an unauthorized actor, the attacker tricks the user into installing a crafted application, successful exploit could allow the attacker do certain unauthenticated operations.

Score

CVSS 3.1 7.8 High

Status

Modified - psirt@huawei.com

Published

2020-03-26

Last modified

2024-08-04

Weaknesses

CWE-284

Affected products

• P30 Firmware (Huawei)

References

• https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200325-02-smartphone-en