First published: Fri Dec 27 2024(Updated: )
There is an improper privilege management vulnerability in Huawei smart phone product. A local, authenticated attacker could craft a specific input to exploit this vulnerability. Successful exploitation may lead to local privilege escalation. (Vulnerability ID: HWPSIRT-2020-05272) This vulnerability has been assigned a Common Vulnerabilities and Exposures (CVE) ID: CVE-2020-9080.
Credit: psirt@huawei.com
Affected Software | Affected Version | How to fix |
---|---|---|
All of | ||
Huawei Mate 20 Pro | =10.1.0.135\(c01e135r2p8\) | |
Huawei Mate 20 Pro | ||
All of | ||
Huawei Mate 20 Pro Firmware | =10.1.0.135\(c00e135r3p8\) | |
Huawei Mate 20 Pro | ||
All of | ||
Huawei Nova 5i Pro Firmware | <10.0.0.125\(c01e123r7p3\) | |
Huawei nova 5i |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2020-9080 is classified as a high-severity vulnerability due to its potential for local privilege escalation.
To remediate CVE-2020-9080, users should update their Huawei smartphone firmware to the latest version provided by the manufacturer.
CVE-2020-9080 affects specific versions of Huawei Mate 20 Pro and Nova 5i firmware with improper privilege management.
An attacker exploiting CVE-2020-9080 could gain elevated privileges on an affected Huawei smartphone.
CVE-2020-9080 is a local vulnerability, requiring authentication to exploit.