First published: Fri Mar 20 2020(Updated: )
There is an improper authentication vulnerability in several smartphones. The applock does not perform a sufficient authentication in certain scenarios, successful exploit could allow the attacker to gain certain data of the application which is locked. Affected product versions include:HUAWEI Mate 20 versions Versions earlier than 10.0.0.188(C00E74R3P8);HUAWEI Mate 30 Pro versions Versions earlier than 10.0.0.203(C00E202R7P2).
Credit: psirt@huawei.com
Affected Software | Affected Version | How to fix |
---|---|---|
Huawei Mate 20 Firmware | <10.0.0.188\(c00e74r3p8\) | |
HUAWEI Mate 20 | ||
Huawei Mate 30 Pro Firmware | <10.0.0.203\(c00e202r7p2\) | |
Huawei Mate 30 Pro |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The vulnerability ID for this improper authentication vulnerability is CVE-2020-1794.
The severity of CVE-2020-1794 is medium with a CVSS score of 4.6.
The affected product version is HUAWEI Mate 20 Firmware up to version 10.0.0.188(c00e74r3p8) and Huawei Mate 30 Pro Firmware up to version 10.0.0.203(c00e202r7p2).
The vulnerability allows attackers to gain certain data of the application which is locked.
HUAWEI Mate 20 and Mate 30 Pro are not vulnerable to CVE-2020-1794.