CVE-2020-9066: High severity Huawei Oxfordp-an10b Firmware vulnerability
Huawei smartphones OxfordP-AN10B with versions earlier than 10.0.1.169(C00E166R4P1) have an improper authentication vulnerability. The Application doesn't perform proper authentication when user performs certain operations. An attacker can trick user into installing a malicious plug-in to exploit this vulnerability. Successful exploit could allow the attacker to bypass the authentication to perform unauthorized operations.
Affected Software
Event History
Frequently Asked Questions
Which devices are affected?
Huawei smartphones running OxfordP-AN10B firmware earlier than 10.0.1.169(C00E166R4P1) are affected.
What does an attacker need to exploit this issue?
The attacker must trick a user into installing a malicious plug-in. Exploitation also requires the user to perform certain operations in the affected application.
What is the security impact if exploitation succeeds?
A successful exploit can bypass authentication and allow unauthorized operations. The reported impact includes high confidentiality, integrity, and availability effects.