CVE-2020-9074
First published: Fri Jun 05 2020(Updated: )
Huawei Smartphones HONOR 20 PRO;Honor View 20;HONOR 20 have an improper handling of exceptional condition Vulnerability. A component cannot deal with an exception correctly. Attackers can exploit this vulnerability by sending malformed message. This could compromise normal service of affected phones.
Credit: psirt@huawei.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Huawei Honor 20 Pro Firmware | <10.0.0.194\(c432e9r5p1\) | |
| Huawei HONOR 20 PRO | ||
| Huawei Honor 20 Pro Firmware | <10.0.0.194\(c636e3r3p1\) | |
| Huawei Honor 20 Pro Firmware | <10.0.0.194\(c00e62r8p12\) | |
| Huawei Honor 20 Pro Firmware | <10.0.0.194\(c10e3r3p2\) | |
| Huawei Honor View 20 Firmware | <10.0.0.200\(c185e3r3p3\) | |
| Huawei Honor View 20 | ||
| Huawei Honor View 20 Firmware | <10.0.0.201\(c636e3r4p3\) | |
| Huawei Honor View 20 Firmware | <10.0.0.195\(c00e62r4p11\) | |
| Huawei Honor View 20 Firmware | <10.0.0.201\(c10e5r4p3\) | |
| Huawei Honor 20 Firmware | <10.0.0.186\(c185e2r2p1\) | |
| Huawei Honor 20 | ||
| Huawei Honor 20 Firmware | <10.0.0.194\(c432e9r5p1\) |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID of this issue?
The vulnerability ID of this issue is CVE-2020-9074.
Which Huawei smartphones are affected by this vulnerability?
Huawei Smartphones HONOR 20 PRO, Honor View 20, and HONOR 20 are affected by this vulnerability.
What is the severity rating of CVE-2020-9074?
CVE-2020-9074 has a severity rating of 5.3 (Medium).
How can attackers exploit this vulnerability?
Attackers can exploit this vulnerability by sending malformed messages.
Is there a fix or patch available for this vulnerability?
For information on fixes or patches, please refer to the official security advisory from Huawei: https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200603-01-smartphone-en.
- collector/nvd-index
- agent/severity
- agent/author
- agent/references
- agent/weakness
- agent/description
- agent/type
- agent/event
- agent/tags
- agent/first-publish-date
- agent/softwarecombine
- agent/last-modified-date
- collector/mitre-cve
- source/MITRE
- vendor/huawei
- canonical/huawei honor 20 pro firmware
- canonical/huawei honor 20 pro
- canonical/huawei honor view 20 firmware
- canonical/huawei honor view 20
- canonical/huawei honor 20 firmware
- canonical/huawei honor 20