NetSight
medium6.8

CVE-2020-9244

HUAWEI Mate 20 versions Versions earlier than 10.1.0.160(C00E160R3P8);HUAWEI Mate 20 Pro versions Versions earlier than 10.1.0.270(C431E7R1P5),Versions earlier…

Impact

HUAWEI Mate 20 versions Versions earlier than 10.1.0.160(C00E160R3P8);HUAWEI Mate 20 Pro versions Versions earlier than 10.1.0.270(C431E7R1P5),Versions earlier than 10.1.0.270(C635E3R1P5),Versions earlier than 10.1.0.273(C636E7R2P4);HUAWEI Mate 20 X versions Versions earlier than 10.1.0.160(C00E160R2P8);HUAWEI P30 versions Versions earlier than 10.1.0.160(C00E160R2P11);HUAWEI P30 Pro versions Versions earlier than 10.1.0.160(C00E160R2P8);HUAWEI Mate 20 RS versions Versions earlier than 10.1.0.160(C786E160R3P8);HonorMagic2 versions Versions earlier than 10.0.0.187(C00E61R2P11);Honor20 versions Versions earlier than 10.0.0.175(C00E58R4P11);Honor20 PRO versions Versions earlier than 10.0.0.194(C00E62R8P12);HonorMagic2 versions Versions earlier than 10.0.0.187(C00E61R2P11);HonorV20 versions Versions earlier than 10.0.0.188(C00E62R2P11) have an improper authentication vulnerability. The system does not properly sign certain encrypted file, the attacker should gain the key used to encrypt the file, successful exploit could cause certain file be forged

Affected products

VendorProductAffected versions
HuaweiMate 20 Firmware
before 10.1.0.160\(c00e160r3p8\)
HuaweiMate 20 Pro Firmware
before 10.1.0.270\(c431e7r1p5\)
before 10.1.0.270\(c635e3r1p5\)
before 10.1.0.273\(c636e7r2p4\)
HuaweiMate 20 X Firmware
before 10.1.0.160\(c00e160r2p8\)
HuaweiP30 Firmware
before 10.1.0.160\(c00e160r2p11\)
HuaweiP30 Pro Firmware
before 10.1.0.160\(c00e160r2p8\)
HuaweiMate 20 Rs Firmware
before 10.1.0.160\(c786e160r3p8\)
HuaweiHonor Magic 2 Firmware
before 10.0.0.187\(c00e61r2p11\)
HuaweiHonor 20 Firmware
before 10.0.0.175\(c00e58r4p11\)
HuaweiHonor 20 Pro Firmware
before 10.0.0.194\(c00e62r8p12\)
HuaweiHonor V20 Firmware
before 10.0.0.188\(c00e62r2p11\)

References