1. Home
  2. CVE Database
  3. CVE-2020-9073
LOW · 2.4

CVE-2020-9073

Huawei P20 smartphones with versions earlier than 10.0.0.156(C00E156R1P4) have an improper authentication vulnerability. The vulnerability is due to that when an user wants to do certain operation, th...

Vulnerability Description

Huawei P20 smartphones with versions earlier than 10.0.0.156(C00E156R1P4) have an improper authentication vulnerability. The vulnerability is due to that when an user wants to do certain operation, the software insufficiently validate the user's identity. Attackers need to physically access the smartphone to exploit this vulnerability. Successful exploit could allow the attacker to bypass the limit of student mode function.

CVSS Score

2.4

LOW

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Attack Vector
PHYSICAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
LOW
Availability
NONE

Affected Products

VendorProductVersions
HuaweiP20 Firmware< 10.0.0.156\(c00e156r1p4\)
HuaweiP20-

Related Weaknesses (CWE)

CWE-287

References

FAQ

What is CVE-2020-9073?

CVE-2020-9073 is a vulnerability with a CVSS score of 2.4 (LOW). Huawei P20 smartphones with versions earlier than 10.0.0.156(C00E156R1P4) have an improper authentication vulnerability. The vulnerability is due to that when an user wants to do certain operation, th...

How severe is CVE-2020-9073?

CVE-2020-9073 has been rated LOW with a CVSS base score of 2.4/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2020-9073?

Check the references section above for vendor advisories and patch information. Affected products include: Huawei P20 Firmware, Huawei P20.