Lucene search

[email protected]CVE-2020-1785

HistoryJan 03, 2020 - 3:15 p.m.

CVE-2020-1785

2020-01-0315:15:12

[email protected]

web.nvd.nist.gov

cve-2020-1785

denial of service

vulnerability

smartphone

mate 10 pro

honor v10

honor 10

nova 4

7.1 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:N/I:N/A:C

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

5.4 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

23.0%

JSON

Mate 10 Pro;Honor V10;Honor 10;Nova 4 smartphones have a denial of service vulnerability. The system does not properly check the status of certain module during certain operations, an attacker should trick the user into installing a malicious application, successful exploit could cause reboot of the smartphone.

Affected configurations

NVD

Node

huaweimate_10_proMatch-

AND

huaweimate_10_pro_firmwareRange<9.1.0.321\(c605e4r1p13t8\)

Node

huaweimate_10_proMatch-

AND

huaweimate_10_pro_firmwareRange<9.1.0.321\(c636e4r1p14t8\)

Node

huaweimate_10_proMatch-

AND

huaweimate_10_pro_firmwareRange<9.1.0.330\(c432e6r1p12t8\)

Node

huaweihonor_v10Match-

AND

huaweihonor_v10_firmwareRange<9.1.0.333\(c00e333r2p1t8\)

Node

huaweihonor_v10Match-

AND

huaweihonor_v10_firmwareRange<9.1.0.350\(c636e4r1p13t8\)

Node

huaweihonor_v10Match-

AND

huaweihonor_v10_firmwareRange<9.1.0.351\(c432e5r1p13t8\)

Node

huaweihonor_10Match-

AND

huaweihonor_10_firmwareRange<9.1.0.350\(c10e5r1p14t8\)

Node

huaweihonor_10Match-

AND

huaweihonor_10_firmwareRange<9.1.0.350\(c185e3r1p12t8\)

Node

huaweihonor_10_firmwareRange<9.1.0.350\(c461e3r1p11t8\)

AND

huaweihonor_10Match-

Node

huaweihonor_10_firmwareRange<9.1.0.350\(c636e3r1p13t8\)

AND

huaweihonor_10Match-

Node

huaweihonor_10_firmwareRange<9.1.0.351\(c432e5r1p13t8\)

AND

huaweihonor_10Match-

Node

huaweinova_4_firmwareRange<9.1.0.225\(c636e1r4p1\)

AND

huaweinova_4Match-

CPENameOperatorVersion
huawei:mate_10_pro_firmwarehuawei mate 10 pro firmwarelt9.1.0.321\(c605e4r1p13t8\)

CPE	Name	Operator	Version
huawei:mate_10_pro_firmware	huawei mate 10 pro firmware	lt	9.1.0.321\(c605e4r1p13t8\)

CNA Affected

[
  {
    "product": "Mate 10 Pro;Honor V10;Honor 10;Nova 4",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Versions earlier than 9.1.0.321(C605E4R1P13T8)"
      },
      {
        "status": "affected",
        "version": "Versions earlier than 9.1.0.321(C636E4R1P14T8)"
      },
      {
        "status": "affected",
        "version": "Versions earlier than 9.1.0.330(C432E6R1P12T8)"
      },
      {
        "status": "affected",
        "version": "Versions earlier than 9.1.0.333(C00E333R2P1T8)"
      },
      {
        "status": "affected",
        "version": "Versions earlier than 9.1.0.350(C636E4R1P13T8)"
      },
      {
        "status": "affected",
        "version": "Versions earlier than 9.1.0.351(C432E5R1P13T8)"
      },
      {
        "status": "affected",
        "version": "Versions earlier than 9.1.0.350(C10E5R1P14T8)"
      },
      {
        "status": "affected",
        "version": "Versions earlier than 9.1.0.350(C185E3R1P12T8)"
      },
      {
        "status": "affected",
        "version": "Versions earlier than 9.1.0.350(C461E3R1P11T8)"
      },
      {
        "status": "affected",
        "version": "Versions earlier than 9.1.0.350(C636E3R1P13T8)"
      },
      {
        "status": "affected",
        "version": "Versions earlier than 9.1.0.225(C636E1R4P1)"
      }
    ]
  }
]

References

www.huawei.com/en/psirt/security-advisories/huawei-sa-20200102-03-smartphone-en

7.1 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:N/I:N/A:C

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

5.4 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

23.0%

JSON

Related for CVE-2020-1785

nvd1 huawei1 prion1 cvelist1