CVE-2020-9089

CWE-200 — Information Exposure3 documents3 sources
Severity
3.3LOW
EPSS
0.1%
top 81.72%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Huawei P30 PRO FirmwareHuawei Huawei P30 PRO
Timeline
PublishedDec 27

Description

There is an information vulnerability in Huawei smartphones. A function in a module can be called without verifying the caller's access. Attackers with user access can exploit this vulnerability to obtain some information. This can lead to information leak. (Vulnerability ID: HWPSIRT-2019-12141) This vulnerability has been assigned a Common Vulnerabilities and Exposures (CVE) ID: CVE-2020-9089.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:NExploitability: 1.8 | Impact: 1.4

Affected Packages2 packages

▶NVDhuawei/p30_pro_firmware< 10.1.0.120\(c431e19r2p5\)+3
▶CVEListV5huawei/huawei_p30_pro4 versions+3

🔴Vulnerability Details

2
GHSA
GHSA-p4pq-33vh-rcmg: There is an information vulnerability in Huawei smartphones↗2024-12-27
▶
CVEList
CVE-2020-9089: There is an information vulnerability in Huawei smartphones↗2024-12-27
▶
CVE-2020-9089 (LOW CVSS 3.3) | There is an information vulnerabili | cvebase.io