NetSight
low3.3

CVE-2020-9250

There is an insufficient authentication vulnerability in some Huawei smart phone.

Impact

There is an insufficient authentication vulnerability in some Huawei smart phone. An unauthenticated, local attacker can crafts software package to exploit this vulnerability. Due to insufficient verification, successful exploitation may impact the service. (Vulnerability ID: HWPSIRT-2019-12302) This vulnerability has been assigned a Common Vulnerabilities and Exposures (CVE) ID: CVE-2020-9250.

Affected products

VendorProductAffected versions
HuaweiMate 20 Pro Firmware
Version 10.1.0.160\(c00e160r3p8\)

Weakness classification

References