CVE-2020-9148 — Huawei Emui vulnerability

3 documents3 sources

Severity

5.5MEDIUMNVD

EPSS

0.0%

top 93.84%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Huawei Emui Huawei Magic UI

Timeline

PublishedApr 1

Latest updateMay 24

Description

An application bypass mechanism vulnerability exists in a component interface of Huawei Smartphone. Local attackers can exploit this vulnerability to delete user SMS messages.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:NExploitability: 1.8 | Impact: 3.6

Affected Packages2 packages

▶NVDhuawei/emui5 versions+4

▶NVDhuawei/magic_ui4 versions+3

🔴Vulnerability Details

GHSA

GHSA-cp64-w3h2-j68x: An application bypass mechanism vulnerability exists in a component interface of Huawei Smartphone↗2022-05-24

▶

CVEList

CVE-2020-9148: An application bypass mechanism vulnerability exists in a component interface of Huawei Smartphone↗2021-04-01

▶