CVE Feed

    Dashboard / CVE / CVE-2020-9226

    CVE-2020-9226

    HUAWEI P30 with versions earlier than 10.1.0.135(C00E135R2P11) have an improper signature verification vulnerability. The system does not improper check signature of specific software package, an attacker may exploit this vulnerability to load a crafted software package to the device.

    Published:Jul 6, 2020
    Last Modified:Nov 21, 2024
    EPS:Jul 6, 2020
    EPSS Score:0.00042
    CVSS Score:5.5

    Affected Products

    Vendor
    Huawei
    Product
    P30
    Vendor
    Huawei
    Product
    P30 Firmware

    Exploits

    No exploit reference

    Common Attack Pattern Enumeration and Classification (CAPEC)

    CAPEC-463 Padding Oracle Crypto Attack
    CAPEC-475 Signature Spoofing by Improper Validation

    Related CVEs

    CVE-2020-9081 (CVSS 3.5) — There is an improper authorization vulnerability in some Huawei smartphones. An attacker could perform a serie…
    CVE-2021-22399 (CVSS 5.5) — The Bluetooth function of some Huawei smartphones has a DoS vulnerability. Attackers can install third-party a…
    CVE-2021-22331 (CVSS 7.5) — There is a JavaScript injection vulnerability in certain Huawei smartphones. A module does not verify some inp…
    CVE-2021-22330 (CVSS 6.5) — There is an out of bounds write vulnerability in Huawei Smartphone HUAWEI P30 versions 9.1.0.131(C00E130R1P21)…
    CVE-2021-22327 (CVSS 6.5) — There is an arbitrary memory write vulnerability in Huawei smart phone when processing file parsing. Due to in…
    CVE-2020-9203 (CVSS 3.3) — There is a resource management errors vulnerability in Huawei P30. Local attackers construct broadcast message…
    CVE-2020-9247 (CVSS 7.8) — There is a buffer overflow vulnerability in several Huawei products. The system does not sufficiently validate…
    CVE-2020-9263 (CVSS 7.8) — HUAWEI Mate 30 versions earlier than 10.1.0.150(C00E136R5P3) and HUAWEI P30 version earlier than 10.1.0.160(C0…
    CVE-2020-9104 (CVSS 4.3) — HUAWEI P30 smartphones with Versions earlier than 10.1.0.123(C431E22R2P5),Versions earlier than 10.1.0.123(C43…
    CVE-2020-9244 (CVSS 6.8) — HUAWEI Mate 20 versions Versions earlier than 10.1.0.160(C00E160R3P8);HUAWEI Mate 20 Pro versions Versions ear…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High