CVE-2020-9110 — Improper Input Validation in Huawei Taurus-an00b Firmware

CWE-20 — Improper Input ValidationCWE-200 — Sensitive Information Exposure3 documents3 sources
Severity
4.6MEDIUMNVD
EPSS
0.0%
top 91.64%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Huawei Taurus-an00b Firmware
Timeline
PublishedOct 12
Latest updateMay 24

Description

Taurus-AN00B versions earlier than 10.1.0.156(C00E155R7P2) have an information disclosure vulnerability. The device does not sufficiently validate the output of device in certain specific scenario, the attacker can gain information in the victim's smartphone to launch the attack, successful exploit could cause information disclosure.

CVSS vector

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:NExploitability: 0.9 | Impact: 3.6

Affected Packages2 packages

▶CVEListV5huawei/taurus-an00b_firmwareVersions earlier than 10.1.0.156(C00E155R7P2)

🔴Vulnerability Details

2
GHSA
GHSA-r9r7-cxf2-frj8: Taurus-AN00B versions earlier than 10↗2022-05-24
▶
CVEList
CVE-2020-9110: Taurus-AN00B versions earlier than 10↗2020-10-12
▶