CVE-2020-9223
First published: Tue Dec 29 2020(Updated: )
There is a denial of service vulnerability in some Huawei smartphones. Due to the improper processing of received abnormal messages, remote attackers may exploit this vulnerability to cause a denial of service (DoS) on the specific module.
Credit: psirt@huawei.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Huawei Honor 20 Pro Firmware | <10.1.0.230\(c432e9r5p1\) | |
| Huawei HONOR 20 PRO | ||
| Huawei Honor 20 Pro Firmware | <10.1.0.231\(c10e3r3p2\) | |
| Huawei Honor 20 Pro Firmware | <10.1.0.231\(c185e3r5p1\) | |
| Huawei Honor 20 Pro Firmware | <10.1.0.231\(c636e3r3p1\) | |
| Huawei Princeton-al10d Firmware | <10.1.0.168\(c00e166r4p11\) | |
| Huawei Princeton-al10d | ||
| Huawei Yale-l21a Firmware | <10.1.0.230\(c432e9r5p1\) | |
| Huawei Yale-l21a | ||
| Huawei Yale-l21a Firmware | <10.1.0.231\(c10e3r3p2\) | |
| Huawei Yale-l21a Firmware | <10.1.0.231\(c185e2r2p1\) | |
| Huawei Yale-l21a Firmware | <10.1.0.231\(c636e3r3p1\) | |
| Huawei Yale-l61a Firmware | <10.1.0.225\(c432e3r1p2\) | |
| Huawei Yale-l61a | ||
| Huawei Yale-l61a Firmware | <10.1.0.226\(c10e3r1p1\) |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2020-9223?
CVE-2020-9223 is a denial of service vulnerability in some Huawei smartphones.
How does CVE-2020-9223 impact Huawei smartphones?
CVE-2020-9223 allows remote attackers to cause a denial of service (DoS) on the specific module of Huawei smartphones.
Which Huawei smartphones are affected by CVE-2020-9223?
Huawei Honor 20 Pro Firmware versions up to 10.1.0.230 (c432e9r5p1), up to 10.1.0.231 (c10e3r3p2), up to 10.1.0.231 (c185e3r5p1), up to 10.1.0.231 (c636e3r3p1), Huawei Princeton-al10d Firmware version up to 10.1.0.168 (c00e166r4p11), Huawei Yale-l21a Firmware versions up to 10.1.0.230 (c432e9r5p1), up to 10.1.0.231 (c10e3r3p2), up to 10.1.0.231 (c185e2r2p1), up to 10.1.0.231 (c636e3r3p1), Huawei Yale-l61a Firmware versions up to 10.1.0.225 (c432e3r1p2), and up to 10.1.0.226 (c10e3r1p1) are affected by CVE-2020-9223.
What is the severity of CVE-2020-9223?
CVE-2020-9223 has a severity rating of 7.5 (High).
How can I fix the CVE-2020-9223 vulnerability?
To fix the CVE-2020-9223 vulnerability, please refer to the security advisory provided by Huawei: https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20201216-03-smartphone-en