CVE-2020-9089: Infoleak
There is an information vulnerability in Huawei smartphones. A function in a module can be called without verifying the caller's access. Attackers with user access can exploit this vulnerability to obtain some information. This can lead to information leak. (Vulnerability ID: HWPSIRT-2019-12141)
This vulnerability has been assigned a Common Vulnerabilities and Exposures (CVE) ID: CVE-2020-9089.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2020-9089?
CVE-2020-9089 is classified as an information vulnerability that could lead to an information leak.
How do I fix CVE-2020-9089?
To fix CVE-2020-9089, users should update their Huawei P30 Pro firmware to the latest version provided by Huawei.
Which devices are affected by CVE-2020-9089?
CVE-2020-9089 specifically affects Huawei P30 Pro smartphones running certain firmware versions.
What can attackers achieve by exploiting CVE-2020-9089?
Attackers with user access can exploit CVE-2020-9089 to obtain sensitive information from the affected device.
Is CVE-2020-9089 related to Huawei's security practices?
Yes, CVE-2020-9089 highlights a flaw in Huawei's security practices regarding caller access verification.