CVE-2020-9064: Medium severity Huawei Honor V30 Firmware vulnerability
Huawei smartphone Honor V30 with versions earlier than OxfordS-AN00A 10.0.1.167(C00E166R4P1) have an improper authentication vulnerability. Authentication to target component is improper when device performs an operation. Attackers exploit this vulnerability to obtain some information by loading malicious application, leading to information leak.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Huawei smartphone Honor V30 (OxfordS-AN00A)to a version that resolves this vulnerability.Fixed in 10.0.1.167(C00E166R4P1)
Event History
Frequently Asked Questions
What is the vulnerability ID for this Huawei smartphone vulnerability?
The vulnerability ID for this Huawei smartphone vulnerability is CVE-2020-9064.
What is the severity rating of CVE-2020-9064?
The severity rating of CVE-2020-9064 is 5.5 (medium).
Which Huawei smartphone models are affected by CVE-2020-9064?
Huawei smartphones with Honor V30 firmware versions earlier than OxfordS-AN00A 10.0.1.167(C00E166R4P1) are affected by CVE-2020-9064.
What is the impact of CVE-2020-9064?
CVE-2020-9064 allows attackers to obtain information by exploiting an improper authentication vulnerability on Huawei Honor V30 smartphones.
How can I fix the CVE-2020-9064 vulnerability on my Huawei Honor V30 smartphone?
To fix the CVE-2020-9064 vulnerability, you should update your Huawei Honor V30 firmware to version OxfordS-AN00A 10.0.1.167(C00E166R4P1) or later.