1. Home
  2. CVE Database
  3. CVE-2020-1801
MEDIUM · 5.5

CVE-2020-1801

There is an improper authentication vulnerability in several smartphones. Certain function interface in the system does not sufficiently validate the caller's identity in certain share scenario, succe...

Vulnerability Description

There is an improper authentication vulnerability in several smartphones. Certain function interface in the system does not sufficiently validate the caller's identity in certain share scenario, successful exploit could cause information disclosure. Affected product versions include:Mate 30 Pro versions Versions earlier than 10.0.0.205(C00E202R7P2);Mate 30 versions Versions earlier than 10.0.0.205(C00E201R7P2).

CVSS Score

5.5

MEDIUM

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
NONE
Availability
NONE

Affected Products

VendorProductVersions
HuaweiMate 30 Pro Firmware< 10.0.0.205\(c00e202r7p2\)
HuaweiMate 30 Pro-
HuaweiMate 30 Firmware< 10.0.0.205\(c00e201r7p2\)
HuaweiMate 30-

Related Weaknesses (CWE)

CWE-287

References

FAQ

What is CVE-2020-1801?

CVE-2020-1801 is a vulnerability with a CVSS score of 5.5 (MEDIUM). There is an improper authentication vulnerability in several smartphones. Certain function interface in the system does not sufficiently validate the caller's identity in certain share scenario, succe...

How severe is CVE-2020-1801?

CVE-2020-1801 has been rated MEDIUM with a CVSS base score of 5.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2020-1801?

Check the references section above for vendor advisories and patch information. Affected products include: Huawei Mate 30 Pro Firmware, Huawei Mate 30 Pro, Huawei Mate 30 Firmware, Huawei Mate 30.