CVE-2020-9247
There is a buffer overflow vulnerability in several Huawei products. The system does not sufficiently validate certain configuration parameter which is passed from user that would cause buffer overflow. The attacker should trick the user into installing and running a malicious application with a high privilege, successful exploit may cause code execution. Affected product include Huawei HONOR 20 PRO, Mate 20, Mate 20 Pro, Mate 20 X, P30, P30 Pro, Hima-L29C, Laya-AL00EP, Princeton-AL10B, Tony-AL00B, Yale-L61A, Yale-TL00B and YaleP-AL10B.
Published:Dec 7, 2020
Last Modified:Nov 21, 2024
EPS:Dec 7, 2020
EPSS Score:0.00352
CVSS Score:7.8
Affected Products
Vendor
Product
Action
Vendor
Huawei
Product
Hima-l29c
Huawei
Hima-l29c
Vendor
Huawei
Product
Hima-l29c Firmware
Huawei
Hima-l29c Firmware
Vendor
Huawei
Product
Honor 20 Pro
Huawei
Honor 20 Pro
Vendor
Huawei
Product
Honor 20 Pro Firmware
Huawei
Honor 20 Pro Firmware
Vendor
Huawei
Product
Laya-al00ep
Huawei
Laya-al00ep
Vendor
Huawei
Product
Laya-al00ep Firmware
Huawei
Laya-al00ep Firmware
Vendor
Huawei
Product
Mate 20
Huawei
Mate 20
Vendor
Huawei
Product
Mate 20 Firmware
Huawei
Mate 20 Firmware
Vendor
Huawei
Product
Mate 20 Pro
Huawei
Mate 20 Pro
Vendor
Huawei
Product
Mate 20 Pro Firmware
Huawei
Mate 20 Pro Firmware
Vendor
Huawei
Product
Mate 20 X
Huawei
Mate 20 X
Vendor
Huawei
Product
Mate 20 X Firmware
Huawei
Mate 20 X Firmware
Vendor
Huawei
Product
P30
Huawei
P30
Vendor
Huawei
Product
P30 Firmware
Huawei
P30 Firmware
Vendor
Huawei
Product
P30 Pro
Huawei
P30 Pro
Vendor
Huawei
Product
P30 Pro Firmware
Huawei
P30 Pro Firmware
Vendor
Huawei
Product
Princeton-al10b
Huawei
Princeton-al10b
Vendor
Huawei
Product
Princeton-al10b Firmware
Huawei
Princeton-al10b Firmware
Vendor
Huawei
Product
Tony-al00b
Huawei
Tony-al00b
Vendor
Huawei
Product
Tony-al00b Firmware
Huawei
Tony-al00b Firmware
Vendor
Huawei
Product
Yale-l61a
Huawei
Yale-l61a
Vendor
Huawei
Product
Yale-l61a Firmware
Huawei
Yale-l61a Firmware
Vendor
Huawei
Product
Yale-tl00b
Huawei
Yale-tl00b
Vendor
Huawei
Product
Yale-tl00b Firmware
Huawei
Yale-tl00b Firmware
Vendor
Huawei
Product
Yalep-al10b
Huawei
Yalep-al10b
Vendor
Huawei
Product
Yalep-al10b Firmware
Huawei
Yalep-al10b Firmware
Exploits
No exploit reference
Common Weakness Enumeration
Common Attack Pattern Enumeration and Classification (CAPEC)
Related CVEs
Common Vulnerability Scoring System
Attack Vector
Network
Adjacent
Local
Physical
Privileges Required
None
Low
High
User Interaction
None
Required
Scope
Unchanged
Changed
Confidentiality
None
Low
High
Integrity
None
Low
High
Availability
None
Low
High
