CVE-2020-1785
published 2020-01-03CVE-2020-1785: Mate 10 Pro;Honor V10;Honor 10;Nova 4 smartphones have a denial of service vulnerability. The system does not properly check the status of certain module…
PriorityP418medium5.5CVSS 3.1
AVLACLPRNUIRSUCNINAH
EPSS
0.48%
38.0th percentile
Mate 10 Pro;Honor V10;Honor 10;Nova 4 smartphones have a denial of service vulnerability. The system does not properly check the status of certain module during certain operations, an attacker should trick the user into installing a malicious application, successful exploit could cause reboot of the smartphone.
Affected
12 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| huawei | honor_10_firmware | < 9.1.0.350\(c10e5r1p14t8\) | 9.1.0.350\(c10e5r1p14t8\) |
| huawei | honor_10_firmware | < 9.1.0.350\(c185e3r1p12t8\) | 9.1.0.350\(c185e3r1p12t8\) |
| huawei | honor_10_firmware | < 9.1.0.350\(c461e3r1p11t8\) | 9.1.0.350\(c461e3r1p11t8\) |
| huawei | honor_10_firmware | < 9.1.0.350\(c636e3r1p13t8\) | 9.1.0.350\(c636e3r1p13t8\) |
| huawei | honor_10_firmware | < 9.1.0.351\(c432e5r1p13t8\) | 9.1.0.351\(c432e5r1p13t8\) |
| huawei | honor_v10_firmware | < 9.1.0.333\(c00e333r2p1t8\) | 9.1.0.333\(c00e333r2p1t8\) |
| huawei | honor_v10_firmware | < 9.1.0.350\(c636e4r1p13t8\) | 9.1.0.350\(c636e4r1p13t8\) |
| huawei | honor_v10_firmware | < 9.1.0.351\(c432e5r1p13t8\) | 9.1.0.351\(c432e5r1p13t8\) |
| huawei | mate_10_pro_firmware | < 9.1.0.321\(c605e4r1p13t8\) | 9.1.0.321\(c605e4r1p13t8\) |
| huawei | mate_10_pro_firmware | < 9.1.0.321\(c636e4r1p14t8\) | 9.1.0.321\(c636e4r1p14t8\) |
| huawei | mate_10_pro_firmware | < 9.1.0.330\(c432e6r1p12t8\) | 9.1.0.330\(c432e6r1p12t8\) |
| huawei | nova_4_firmware | < 9.1.0.225\(c636e1r4p1\) | 9.1.0.225\(c636e1r4p1\) |
CVSS provenance
nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
nvdv2.07.1HIGHAV:N/AC:M/Au:N/C:N/I:N/A:C
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2020-01-03
Published