CVE-2020-9243

CWE-674 — Uncontrolled Recursion3 documents3 sources
Severity
5.5MEDIUM
EPSS
0.1%
top 77.08%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Huawei Mate 30 Firmware
Timeline
PublishedAug 10
Latest updateMay 24

Description

HUAWEI Mate 30 with versions earlier than 10.1.0.150(C00E136R5P3) have a denial of service vulnerability. The system does not properly limit the depth of recursion, an attacker should trick the user installing and execute a malicious application. Successful exploit could cause a denial of service condition.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:HExploitability: 1.8 | Impact: 3.6

Affected Packages2 packages

▶NVDhuawei/mate_30_firmware< 10.1.0.150\(c00e136r5p3\)
▶CVEListV5huawei_mate_30Versions earlier than 10.1.0.150(C00E136R5P3)

🔴Vulnerability Details

2
GHSA
GHSA-6ppm-q587-qrq9: HUAWEI Mate 30 with versions earlier than 10↗2022-05-24
▶
CVEList
CVE-2020-9243: HUAWEI Mate 30 with versions earlier than 10↗2020-08-10
▶
CVE-2020-9243 (MEDIUM CVSS 5.5) | HUAWEI Mate 30 with versions earlie | cvebase.io