1. Home
  2. CVE Database
  3. CVE-2020-9109
MEDIUM · 4.6

CVE-2020-9109

There is an information disclosure vulnerability in several smartphones. The device does not sufficiently validate the identity of smart wearable device in certain specific scenario, the attacker need...

Vulnerability Description

There is an information disclosure vulnerability in several smartphones. The device does not sufficiently validate the identity of smart wearable device in certain specific scenario, the attacker need to gain certain information in the victim's smartphone to launch the attack, and successful exploit could cause information disclosure.Affected product versions include:HUAWEI Mate 20 versions earlier than 10.1.0.160(C00E160R3P8),versions earlier than 10.1.0.160(C01E160R2P8);HUAWEI Mate 20 X versions earlier than 10.1.0.160(C00E160R2P8),versions earlier than 10.1.0.160(C01E160R2P8);HUAWEI P30 Pro versions earlier than 10.1.0.160(C00E160R2P8);Laya-AL00EP versions earlier than 10.1.0.160(C786E160R3P8);Tony-AL00B versions earlier than 10.1.0.160(C00E160R2P11);Tony-TL00B versions earlier than 10.1.0.160(C01E160R2P11).

CVSS Score

4.6

MEDIUM

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Attack Vector
PHYSICAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
NONE
Availability
NONE

Affected Products

VendorProductVersions
HuaweiMate 20 Firmware< 10.1.0.160\(c00e160r3p8\)
HuaweiMate 20-
HuaweiMate 20 X Firmware< 10.1.0.160\(c00e160r2p8\)
HuaweiMate 20 X-
HuaweiP30 Pro Firmware< 10.1.0.160\(c00e160r2p8\)
HuaweiP30 Pro-
HuaweiLaya-Al00Ep Firmware< 10.1.0.160\(c786e160r3p8\)
HuaweiLaya-Al00Ep-
HuaweiTony-Al00B Firmware< 10.1.0.160\(c00e160r2p11\)
HuaweiTony-Al00B-
HuaweiTony-Tl00B Firmware< 10.1.0.160\(c01e160r2p11\)
HuaweiTony-Tl00B-

Related Weaknesses (CWE)

CWE-287

References

FAQ

What is CVE-2020-9109?

CVE-2020-9109 is a vulnerability with a CVSS score of 4.6 (MEDIUM). There is an information disclosure vulnerability in several smartphones. The device does not sufficiently validate the identity of smart wearable device in certain specific scenario, the attacker need...

How severe is CVE-2020-9109?

CVE-2020-9109 has been rated MEDIUM with a CVSS base score of 4.6/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2020-9109?

Check the references section above for vendor advisories and patch information. Affected products include: Huawei Mate 20 Firmware, Huawei Mate 20, Huawei Mate 20 X Firmware, Huawei Mate 20 X, Huawei P30 Pro Firmware.