CVE-2020-9244

CWE-287 — Improper Authentication3 documents3 sources
Severity
6.8MEDIUM
EPSS
0.0%
top 92.55%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
10
Huawei Honor 20 FirmwareHuawei Honor 20 PRO FirmwareHuawei Honor Magic 2 Firmware+7 more
Timeline
PublishedAug 11
Latest updateMay 24

Description

HUAWEI Mate 20 versions Versions earlier than 10.1.0.160(C00E160R3P8);HUAWEI Mate 20 Pro versions Versions earlier than 10.1.0.270(C431E7R1P5),Versions earlier than 10.1.0.270(C635E3R1P5),Versions earlier than 10.1.0.273(C636E7R2P4);HUAWEI Mate 20 X versions Versions earlier than 10.1.0.160(C00E160R2P8);HUAWEI P30 versions Versions earlier than 10.1.0.160(C00E160R2P11);HUAWEI P30 Pro versions Versions earlier than 10.1.0.160(C00E160R2P8);HUAWEI Mate 20 RS versions Versions earlier than 10.1.0.16…

CVSS vector

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HExploitability: 0.9 | Impact: 5.9

Affected Packages10 packages

▶NVDhuawei/mate_20_firmware< 10.1.0.160\(c00e160r3p8\)
▶NVDhuawei/mate_20_x_firmware< 10.1.0.160\(c00e160r2p8\)
▶NVDhuawei/mate_20_rs_firmware< 10.1.0.160\(c786e160r3p8\)
▶NVDhuawei/mate_20_pro_firmware< 10.1.0.270\(c431e7r1p5\)+2
▶NVDhuawei/honor_20_firmware< 10.0.0.175\(c00e58r4p11\)

🔴Vulnerability Details

2
GHSA
GHSA-jx8x-69j8-c7fj: HUAWEI Mate 20 versions Versions earlier than 10↗2022-05-24
▶
CVEList
CVE-2020-9244: HUAWEI Mate 20 versions Versions earlier than 10↗2020-08-11
▶
CVE-2020-9244 (MEDIUM CVSS 6.8) | HUAWEI Mate 20 versions Versions ea | cvebase.io