CVE Feed

    Dashboard / CVE / CVE-2020-9076

    CVE-2020-9076

    HUAWEI P30;HUAWEI P30 Pro;Tony-AL00B smartphones with versions earlier than 10.1.0.135(C00E135R2P11); versions earlier than 10.1.0.135(C00E135R2P8), versions earlier than 10.1.0.135 have an improper authentication vulnerability. Due to the identity of the message sender not being properly verified, an attacker can exploit this vulnerability through man-in-the-middle attack to induce user to access malicious URL.

    Published:Jun 15, 2020
    Last Modified:Nov 21, 2024
    EPS:Jun 15, 2020
    EPSS Score:0.00102
    CVSS Score:6.8

    Affected Products

    Vendor
    Huawei
    Product
    P30
    Vendor
    Huawei
    Product
    P30 Firmware
    Vendor
    Huawei
    Product
    P30 Pro
    Vendor
    Huawei
    Product
    P30 Pro Firmware
    Vendor
    Huawei
    Product
    Tony-al00b
    Vendor
    Huawei
    Product
    Tony-al00b Firmware

    Exploits

    No exploit reference

    Common Weakness Enumeration

    CWE-287 Improper Authentication

    Related CVEs

    CVE-2020-9081 (CVSS 3.5) — There is an improper authorization vulnerability in some Huawei smartphones. An attacker could perform a serie…
    CVE-2021-22399 (CVSS 5.5) — The Bluetooth function of some Huawei smartphones has a DoS vulnerability. Attackers can install third-party a…
    CVE-2021-22331 (CVSS 7.5) — There is a JavaScript injection vulnerability in certain Huawei smartphones. A module does not verify some inp…
    CVE-2021-22330 (CVSS 6.5) — There is an out of bounds write vulnerability in Huawei Smartphone HUAWEI P30 versions 9.1.0.131(C00E130R1P21)…
    CVE-2021-22327 (CVSS 6.5) — There is an arbitrary memory write vulnerability in Huawei smart phone when processing file parsing. Due to in…
    CVE-2020-9203 (CVSS 3.3) — There is a resource management errors vulnerability in Huawei P30. Local attackers construct broadcast message…
    CVE-2020-9247 (CVSS 7.8) — There is a buffer overflow vulnerability in several Huawei products. The system does not sufficiently validate…
    CVE-2020-9263 (CVSS 7.8) — HUAWEI Mate 30 versions earlier than 10.1.0.150(C00E136R5P3) and HUAWEI P30 version earlier than 10.1.0.160(C0…
    CVE-2020-9104 (CVSS 4.3) — HUAWEI P30 smartphones with Versions earlier than 10.1.0.123(C431E22R2P5),Versions earlier than 10.1.0.123(C43…
    CVE-2020-9244 (CVSS 6.8) — HUAWEI Mate 20 versions Versions earlier than 10.1.0.160(C00E160R3P8);HUAWEI Mate 20 Pro versions Versions ear…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High