First published: Fri Mar 20 2020(Updated: )
There is an improper authorization vulnerability in several smartphones. The software incorrectly performs an authorization to certain user, successful exploit could allow a low privilege user to do certain operation which the user are supposed not to do.Affected product versions include:HUAWEI Mate 20 versions Versions earlier than 10.0.0.188(C00E74R3P8);HUAWEI Mate 30 Pro versions Versions earlier than 10.0.0.203(C00E202R7P2).
Credit: psirt@huawei.com
Affected Software | Affected Version | How to fix |
---|---|---|
Huawei Mate 20 Firmware | <=10.0.0.188\(c00e74r3p8\) | |
HUAWEI Mate 20 | ||
Huawei Mate 30 Pro Firmware | <=10.0.0.203\(c00e202r7p2\) | |
Huawei Mate 30 Pro |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The vulnerability ID for this issue is CVE-2020-1796.
The severity of CVE-2020-1796 is medium with a CVSS score of 6.6.
This vulnerability affects Huawei Mate 20 and Huawei Mate 30 Pro smartphones.
The vulnerability allows a low privilege user to perform certain unauthorized operations on the affected smartphones.
Please refer to the official Huawei security advisory for information on available fixes.