What is CVE-2020-1801?

CVE-2020-1801 is an improper authentication vulnerability found in several smartphones, specifically in certain function interfaces that do not sufficiently validate the caller's identity in certain share scenarios, which could lead to information disclosure.

What products are affected by CVE-2020-1801?

The affected products include Huawei Mate 30 Pro Firmware version up to 10.0.0.205(c00e202r7p2) and Huawei Mate 30 Firmware version up to 10.0.0.205(c00e201r7p2).

What is the severity of CVE-2020-1801?

CVE-2020-1801 has a severity score of 5.5, which is classified as medium.

How can CVE-2020-1801 be exploited?

Successful exploitation of CVE-2020-1801 could result in the disclosure of sensitive information.

How can I mitigate the vulnerability in my smartphone?

To mitigate the vulnerability in your smartphone, it is recommended to update to the latest firmware version provided by Huawei as soon as it becomes available.

Vulnerability/
CVE-2020-1801

medium

5.5

CWE

287

10/4/2020

4/8/2024

CVE-2020-1801

First published: Fri Apr 10 2020(Updated: )

There is an improper authentication vulnerability in several smartphones. Certain function interface in the system does not sufficiently validate the caller's identity in certain share scenario, successful exploit could cause information disclosure. Affected product versions include:Mate 30 Pro versions Versions earlier than 10.0.0.205(C00E202R7P2);Mate 30 versions Versions earlier than 10.0.0.205(C00E201R7P2).

Credit: psirt@huawei.com

Affected Software	Affected Version	How to fix
Huawei Mate 30 Pro Firmware	<10.0.0.205\(c00e202r7p2\)
Huawei Mate 30 Pro
Huawei Mate 30 Firmware	<10.0.0.205\(c00e201r7p2\)
HUAWEI Mate 30

Never miss a vulnerability like this again

Reference Links

https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200408-01-smartphone-en

Frequently Asked Questions

What is CVE-2020-1801?
CVE-2020-1801 is an improper authentication vulnerability found in several smartphones, specifically in certain function interfaces that do not sufficiently validate the caller's identity in certain share scenarios, which could lead to information disclosure.
What products are affected by CVE-2020-1801?
The affected products include Huawei Mate 30 Pro Firmware version up to 10.0.0.205(c00e202r7p2) and Huawei Mate 30 Firmware version up to 10.0.0.205(c00e201r7p2).
What is the severity of CVE-2020-1801?
CVE-2020-1801 has a severity score of 5.5, which is classified as medium.
How can CVE-2020-1801 be exploited?
Successful exploitation of CVE-2020-1801 could result in the disclosure of sensitive information.
How can I mitigate the vulnerability in my smartphone?
To mitigate the vulnerability in your smartphone, it is recommended to update to the latest firmware version provided by Huawei as soon as it becomes available.

collector/nvd-index
agent/severity
agent/weakness
agent/author
agent/references
agent/type
agent/event
agent/description
agent/softwarecombine
agent/last-modified-date
agent/first-publish-date
agent/tags
collector/mitre-cve
source/MITRE
vendor/huawei
canonical/huawei mate 30 pro firmware
canonical/huawei mate 30 pro
canonical/huawei mate 30 firmware
canonical/huawei mate 30

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.