First published: Fri Mar 20 2020(Updated: )
There is an improper authentication vulnerability in several smartphones. The applock does not perform a sufficient authentication in certain scenarios, successful exploit could allow the attacker to gain certain data of the application which is locked. Affected product versions include:HUAWEI Mate 20 versions Versions earlier than 10.0.0.188(C00E74R3P8);HUAWEI Mate 30 Pro versions Versions earlier than 10.0.0.203(C00E202R7P2).
Credit: psirt@huawei.com
Affected Software | Affected Version | How to fix |
---|---|---|
Huawei Mate 20 Firmware | <10.0.0.188\(c00e74r3p8\) | |
HUAWEI Mate 20 | ||
Huawei Mate 30 Pro Firmware | <10.0.0.203\(c00e202r7p2\) | |
Huawei Mate 30 Pro |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The vulnerability ID for this issue is CVE-2020-1793.
The severity level of CVE-2020-1793 is medium with a value of 4.6.
The affected software for CVE-2020-1793 include HUAWEI Mate 20 Firmware (up to version 10.0.0.188(c00e74r3p8)) and Huawei Mate 30 Pro Firmware (up to version 10.0.0.203(c00e202r7p2)).
The impact of CVE-2020-1793 is that an attacker could exploit the vulnerability to gain certain data of the application that is locked.
No, HUAWEI Mate 20 and Mate 30 Pro are not vulnerable to CVE-2020-1793.