Vulnerability Description
HUAWEI Mate 20 smartphones versions earlier than 9.1.0.139(C00E133R3P1) have an improper authentication vulnerability. The system has a logic error under certain scenario, successful exploit could allow the attacker who gains the privilege of guest user to access to the host user's desktop in an instant, without unlocking the screen lock of the host user.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Huawei | Mate 20 Firmware | < 9.1.0.139\(c00e133r3p1\) |
| Huawei | Mate 20 | - |
Related Weaknesses (CWE)
References
- https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200108-02-smartpVendor Advisory
- https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200108-02-smartpVendor Advisory
FAQ
What is CVE-2020-1787?
CVE-2020-1787 is a vulnerability with a CVSS score of 6.6 (MEDIUM). HUAWEI Mate 20 smartphones versions earlier than 9.1.0.139(C00E133R3P1) have an improper authentication vulnerability. The system has a logic error under certain scenario, successful exploit could all...
How severe is CVE-2020-1787?
CVE-2020-1787 has been rated MEDIUM with a CVSS base score of 6.6/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2020-1787?
Check the references section above for vendor advisories and patch information. Affected products include: Huawei Mate 20 Firmware, Huawei Mate 20.