CVE-2020-9119
First published: Thu Dec 24 2020(Updated: )
There is a privilege escalation vulnerability on some Huawei smart phones due to design defects. The attacker needs to physically contact the mobile phone and obtain higher privileges, and execute relevant commands, resulting in the user's privilege promotion.
Credit: psirt@huawei.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Huawei Mate 10 Firmware | <10.0.0.189\(c185e6r1p3\) | |
| Huawei Mate 10 | ||
| Huawei Mate 30 Firmware | <10.1.0.156\(c00e155r7p2\) | |
| HUAWEI Mate 30 | ||
| Huawei Mate 30 Pro Firmware | <10.1.0.156\(c00e156r7p2\) | |
| Huawei Mate 30 Pro | ||
| Huawei P40 Firmware | <10.1.0.150\(sp1c00e150r4p1\) | |
| HUAWEI P40 | ||
| Huawei P40 Pro Firmware | <10.1.0.150\(sp1c00e150r4p1\) | |
| Huawei P40 Pro |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2020-9119?
CVE-2020-9119 is a privilege escalation vulnerability on some Huawei smartphones due to design defects.
What is the severity of CVE-2020-9119?
The severity of CVE-2020-9119 is medium with a CVSS score of 6.2.
Which Huawei smartphones are affected by CVE-2020-9119?
Huawei Mate 10 Firmware (up to version 10.0.0.189(c185e6r1p3)), Huawei Mate 30 Firmware (up to version 10.1.0.156(c00e155r7p2)), Huawei Mate 30 Pro Firmware (up to version 10.1.0.156(c00e156r7p2)), Huawei P40 Firmware (up to version 10.1.0.150(sp1c00e150r4p1)), and Huawei P40 Pro Firmware (up to version 10.1.0.150(sp1c00e150r4p1)) are affected.
How can an attacker exploit CVE-2020-9119?
To exploit CVE-2020-9119, the attacker needs to physically contact the targeted Huawei smartphone, obtain higher privileges, and execute relevant commands.
Is CVE-2020-9119 a remote vulnerability?
No, CVE-2020-9119 requires physical access to the device and is not a remote vulnerability.
- collector/nvd-index
- agent/severity
- agent/author
- agent/type
- agent/references
- agent/event
- agent/description
- agent/last-modified-date
- agent/softwarecombine
- agent/first-publish-date
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/huawei
- canonical/huawei mate 10 firmware
- canonical/huawei mate 10
- canonical/huawei mate 30 firmware
- canonical/huawei mate 30
- canonical/huawei mate 30 pro firmware
- canonical/huawei mate 30 pro
- canonical/huawei p40 firmware
- canonical/huawei p40
- canonical/huawei p40 pro firmware
- canonical/huawei p40 pro