NetSight
medium6.2

CVE-2020-9119

There is a privilege escalation vulnerability on some Huawei smart phones due to design defects.

Impact

There is a privilege escalation vulnerability on some Huawei smart phones due to design defects. The attacker needs to physically contact the mobile phone and obtain higher privileges, and execute relevant commands, resulting in the user's privilege promotion.

Affected products

VendorProductAffected versions
HuaweiMate 10 Firmware
before 10.0.0.189\(c185e6r1p3\)
HuaweiMate 30 Firmware
before 10.1.0.156\(c00e155r7p2\)
HuaweiMate 30 Pro Firmware
before 10.1.0.156\(c00e156r7p2\)
HuaweiP40 Firmware
before 10.1.0.150\(sp1c00e150r4p1\)
HuaweiP40 Pro Firmware
before 10.1.0.150\(sp1c00e150r4p1\)

References