Home
LOW: 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:LDefault status
unaffected
Versions earlier than 10.1.0.160(C00E160R3P8)
affected
Description
There is an insufficient authentication vulnerability in some Huawei smart phone. An unauthenticated, local attacker can crafts software package to exploit this vulnerability. Due to insufficient verification, successful exploitation may impact the service. (Vulnerability ID: HWPSIRT-2019-12302) This vulnerability has been assigned a Common Vulnerabilities and Exposures (CVE) ID: CVE-2020-9250.
Problem types
CWE-287: Improper Authentication
Product status
Versions earlier than 10.1.0.160(C00E160R3P8)
References
www.huawei.com/...sories/huawei-sa-20200729-01-smartphone-en