exploitDog

CVE-2020-9250

Опубликовано: 20 дек. 2024

Источник: nvd

CVSS3: 3.3

EPSS Низкий

Описание

There is an insufficient authentication vulnerability in some Huawei smart phone. An unauthenticated, local attacker can crafts software package to exploit this vulnerability. Due to insufficient verification, successful exploitation may impact the service. (Vulnerability ID: HWPSIRT-2019-12302)

This vulnerability has been assigned a Common Vulnerabilities and Exposures (CVE) ID: CVE-2020-9250.

Ссылки

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200729-01-smartphone-en
Broken Link
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:huawei:mate_20_pro_firmware:10.1.0.160\(c00e160r3p8\):*:*:*:*:*:*:*

cpe:2.3:h:huawei:mate_20_pro:-:*:*:*:*:*:*:*

EPSS

Процентиль: 14%

0.00046

Низкий

3.3 Low

CVSS3

Дефекты

CWE-287

CWE-522

Связанные уязвимости

GHSA-j9vj-qv55-qq58

CVSS3: 3.3

github

около 1 года назад

There is an insufficient authentication vulnerability in some Huawei smart phone. An unauthenticated, local attacker can crafts software package to exploit this vulnerability. Due to insufficient verification, successful exploitation may impact the service. (Vulnerability ID: HWPSIRT-2019-12302) This vulnerability has been assigned a Common Vulnerabilities and Exposures (CVE) ID: CVE-2020-9250.

EPSS

Процентиль: 14%

0.00046

Низкий

3.3 Low

CVSS3

Дефекты

CWE-287

CWE-522