CVE-2020-9106: Path Traversal
Published Oct 12, 2020
·Updated
HUAWEI P30 Pro versions earlier than 10.1.0.160(C00E160R2P8) have a path traversal vulnerability. The system does not sufficiently validate certain pathname, successful exploit could allow the attacker access files and cause information disclosure.
Affected Software
2 affected components
Huawei P30 Pro Firmware<10.1.0.160\(c00e160r2p8\)
Huawei P30 Pro
Event History
Oct 12, 2020
CVE Published
via MITRE·01:43 PM
Data Sourced
via MITRE·01:43 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the vulnerability ID of this vulnerability?
The vulnerability ID is CVE-2020-9106.
2
What is the severity of CVE-2020-9106?
The severity of CVE-2020-9106 is medium (CVSS score: 4.6).
3
Which versions of HUAWEI P30 Pro are affected by CVE-2020-9106?
HUAWEI P30 Pro versions earlier than 10.1.0.160(C00E160R2P8) are affected by CVE-2020-9106.
4
How does the vulnerability CVE-2020-9106 work?
CVE-2020-9106 is a path traversal vulnerability that allows attackers to access files and cause information disclosure by exploiting a lack of validation on certain pathnames.
5
Is there a fix available for CVE-2020-9106?
Yes, updating HUAWEI P30 Pro to version 10.1.0.160(C00E160R2P8) or later will fix the vulnerability CVE-2020-9106.