CVE Feed

    Dashboard / CVE / CVE-2020-9077

    CVE-2020-9077

    HUAWEI P30 smart phones with versions earlier than 10.1.0.160(C00E160R2P11) have an information exposure vulnerability. The system does not properly authenticate the application that access a specified interface. Attackers can trick users into installing malicious software to exploit this vulnerability and obtain some information about the device. Successful exploit may cause information disclosure.

    Published:Jul 27, 2020
    Last Modified:Nov 21, 2024
    EPS:Jul 27, 2020
    EPSS Score:0.0026
    CVSS Score:3.3

    Affected Products

    Vendor
    Huawei
    Product
    P30
    Vendor
    Huawei
    Product
    P30 Firmware

    Exploits

    No exploit reference

    Common Weakness Enumeration

    CWE-287 Improper Authentication

    Related CVEs

    CVE-2020-9081 (CVSS 3.5) — There is an improper authorization vulnerability in some Huawei smartphones. An attacker could perform a serie…
    CVE-2021-22399 (CVSS 5.5) — The Bluetooth function of some Huawei smartphones has a DoS vulnerability. Attackers can install third-party a…
    CVE-2021-22331 (CVSS 7.5) — There is a JavaScript injection vulnerability in certain Huawei smartphones. A module does not verify some inp…
    CVE-2021-22330 (CVSS 6.5) — There is an out of bounds write vulnerability in Huawei Smartphone HUAWEI P30 versions 9.1.0.131(C00E130R1P21)…
    CVE-2021-22327 (CVSS 6.5) — There is an arbitrary memory write vulnerability in Huawei smart phone when processing file parsing. Due to in…
    CVE-2020-9203 (CVSS 3.3) — There is a resource management errors vulnerability in Huawei P30. Local attackers construct broadcast message…
    CVE-2020-9247 (CVSS 7.8) — There is a buffer overflow vulnerability in several Huawei products. The system does not sufficiently validate…
    CVE-2020-9263 (CVSS 7.8) — HUAWEI Mate 30 versions earlier than 10.1.0.150(C00E136R5P3) and HUAWEI P30 version earlier than 10.1.0.160(C0…
    CVE-2020-9104 (CVSS 4.3) — HUAWEI P30 smartphones with Versions earlier than 10.1.0.123(C431E22R2P5),Versions earlier than 10.1.0.123(C43…
    CVE-2020-9244 (CVSS 6.8) — HUAWEI Mate 20 versions Versions earlier than 10.1.0.160(C00E160R3P8);HUAWEI Mate 20 Pro versions Versions ear…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High