There is an improper privilege management vulnerability in Huawei smart phone product. A local, authenticated attacker could craft a specific input to exploit this vulnerability. Successful exploitation may lead to local privilege escalation. (Vulnerability ID: HWPSIRT-2020-05272)
This vulnerability has been assigned a Common Vulnerabilities and Exposures (CVE) ID: CVE-2020-9080.
References
| Link | Resource |
|---|---|
| https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200819-01-smartphone-en | Vendor Advisory |
Configurations
Configuration 1 (hide)
| AND |
|
Configuration 2 (hide)
| AND |
|
Configuration 3 (hide)
| AND |
|
History
10 Jan 2025, 20:36
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.8 |
| CWE | NVD-CWE-noinfo | |
| First Time |
Huawei mate 20 Pro Firmware
Huawei mate 20 Pro Huawei mate 20 Pro \(ud\) Huawei mate 20 Pro \(ud\) Firmware Huawei nova 5i Huawei Huawei nova 5i Firmware |
|
| CPE | cpe:2.3:o:huawei:mate_20_pro_firmware:10.1.0.135\(c01e135r2p8\):*:*:*:*:*:*:* cpe:2.3:h:huawei:mate_20_pro:-:*:*:*:*:*:*:* cpe:2.3:o:huawei:nova_5i_firmware:*:*:*:*:*:*:*:* cpe:2.3:o:huawei:mate_20_pro_\(ud\)_firmware:10.1.0.135\(c00e135r3p8\):*:*:*:*:*:*:* cpe:2.3:h:huawei:nova_5i:-:*:*:*:*:*:*:* cpe:2.3:h:huawei:mate_20_pro_\(ud\):-:*:*:*:*:*:*:* |
|
| References | () https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200819-01-smartphone-en - Vendor Advisory |
27 Dec 2024, 10:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-12-27 10:15
Updated : 2025-01-10 20:36
NVD link : CVE-2020-9080
Mitre link : CVE-2020-9080
JSON object : View
Products Affected
huawei
- nova_5i
- mate_20_pro_\(ud\)
- nova_5i_firmware
- mate_20_pro
- mate_20_pro_\(ud\)_firmware
- mate_20_pro_firmware
CWE