Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2020-9070

Опубликовано: 20 апр. 2020
Источник: nvd
CVSS3: 5.5
CVSS2: 4.3
EPSS Низкий

Описание

Huawei smartphones Taurus-AL00B with versions earlier than 10.0.0.205(C00E201R7P2) have an improper authentication vulnerability. The software insufficiently validate the user's identity when a user wants to do certain operation. An attacker can trick user into installing a malicious application to exploit this vulnerability. Successful exploit may cause some information disclosure.

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:huawei:taurus-al00b_firmware:*:*:*:*:*:*:*:*
Версия до 10.0.0.205\(c00e201r7p2\) (исключая)
cpe:2.3:h:huawei:taurus-al00b:-:*:*:*:*:*:*:*

EPSS

Процентиль: 21%
0.00069
Низкий

5.5 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-287

Связанные уязвимости

github
больше 3 лет назад

Huawei smartphones Taurus-AL00B with versions earlier than 10.0.0.205(C00E201R7P2) have an improper authentication vulnerability. The software insufficiently validate the user's identity when a user wants to do certain operation. An attacker can trick user into installing a malicious application to exploit this vulnerability. Successful exploit may cause some information disclosure.

EPSS

Процентиль: 21%
0.00069
Низкий

5.5 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-287