CVE-2020-1840
published 2020-01-21CVE-2020-1840: HUAWEI Mate 20 smart phones with versions earlier than 10.0.0.175(C00E70R3P8) have an insufficient authentication vulnerability. A local attacker with high…
medium6CVSS 3.1
AVLACLPRHUINSUCHINAH
HUAWEI Mate 20 smart phones with versions earlier than 10.0.0.175(C00E70R3P8) have an insufficient authentication vulnerability. A local attacker with high privilege can execute a specific command to exploit this vulnerability. Successful exploitation may cause information leak and compromise the availability of the smart phones.Affected product versions include: HUAWEI Mate 20 versions Versions earlier than 10.0.0.175(C00E70R3P8)
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| huawei | mate_20_firmware | <= 10.0.0.175\(c00e70r3p8\) | — |
| rails | actionview | >= 5.0.0 < 5.2.4.3 | 5.2.4.3 |
| rails | actionview | >= 6.0.0 < 6.0.3.1 | 6.0.3.1 |
CVSS provenance
nvdv3.16.0MEDIUMCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:H
ghsa5.0MEDIUM