CVE-2020-9081
There is an improper authorization vulnerability in some Huawei smartphones. An attacker could perform a series of operation in specific mode to exploit this vulnerability. Successful exploit could allow the attacker to bypass app lock. (Vulnerability ID: HWPSIRT-2019-12144) This vulnerability has been assigned a Common Vulnerabilities and Exposures (CVE) ID: CVE-2020-9081.
- Score
- CVSS 3.1 6.8 Medium
- Status
- Analyzed - psirt@huawei.com
- Published
- 2024-12-27
- Last modified
- 2024-12-27
- Weaknesses
- CWE-285, CWE-863
Affected products
- Huawei Mate 20 (Huawei)
- Huawei P30 (Huawei)
- Huawei P30 Pro (Huawei)
- Mate 20 Firmware (Huawei)
- P30 Firmware (Huawei)
- P30 Pro Firmware (Huawei)
- Princeton-al10d (Huawei)
- Princeton-al10d Firmware (Huawei)
- Yale-al00a (Huawei)
- Yale-al00a Firmware (Huawei)
- Yale-al50a (Huawei)
- Yale-al50a Firmware (Huawei)
- Yalep-al10b (Huawei)
- Yalep-al10b Firmware (Huawei)
References
- https://www.huawei.com/en/psirt/security-advisories/2020/huawei-sa-20200826-15-smartphone-en
