Lucene search

K
cveHuaweiCVE-2020-9158
HistoryJul 01, 2021 - 12:15 p.m.

CVE-2020-9158

2021-07-0112:15:07
huawei
web.nvd.nist.gov
26
huawei
smartphone
cryptographic step
vulnerability
cve-2020-9158
dos
samgr
nvd

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS

0.001

Percentile

42.5%

There is a Missing Cryptographic Step vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may cause DoS of Samgr.

Affected configurations

Nvd
Vulners
Node
huaweiemuiMatch8.0
OR
huaweiemuiMatch8.2
OR
huaweiemuiMatch9.1.0
OR
huaweiemuiMatch9.1.1
OR
huaweiemuiMatch10.0.0
OR
huaweiemuiMatch10.1.0
OR
huaweiemuiMatch10.1.1
OR
huaweiemuiMatch11.0.0
OR
huaweimagic_uiMatch2.1.1
OR
huaweimagic_uiMatch3.0.0
OR
huaweimagic_uiMatch3.1.0
OR
huaweimagic_uiMatch3.1.1
OR
huaweimagic_uiMatch4.0.0
VendorProductVersionCPE
huaweiemui8.0cpe:2.3:o:huawei:emui:8.0:*:*:*:*:*:*:*
huaweiemui8.2cpe:2.3:o:huawei:emui:8.2:*:*:*:*:*:*:*
huaweiemui9.1.0cpe:2.3:o:huawei:emui:9.1.0:*:*:*:*:*:*:*
huaweiemui9.1.1cpe:2.3:o:huawei:emui:9.1.1:*:*:*:*:*:*:*
huaweiemui10.0.0cpe:2.3:o:huawei:emui:10.0.0:*:*:*:*:*:*:*
huaweiemui10.1.0cpe:2.3:o:huawei:emui:10.1.0:*:*:*:*:*:*:*
huaweiemui10.1.1cpe:2.3:o:huawei:emui:10.1.1:*:*:*:*:*:*:*
huaweiemui11.0.0cpe:2.3:o:huawei:emui:11.0.0:*:*:*:*:*:*:*
huaweimagic_ui2.1.1cpe:2.3:o:huawei:magic_ui:2.1.1:*:*:*:*:*:*:*
huaweimagic_ui3.0.0cpe:2.3:o:huawei:magic_ui:3.0.0:*:*:*:*:*:*:*
Rows per page:
1-10 of 131

CNA Affected

[
  {
    "product": "EMUI, Magic UI",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "EMUI 11.0.0"
      },
      {
        "status": "affected",
        "version": "EMUI 10.1.1"
      },
      {
        "status": "affected",
        "version": "EMUI 10.1.0"
      },
      {
        "status": "affected",
        "version": "EMUI 10.0.0"
      },
      {
        "status": "affected",
        "version": "EMUI 9.1.1"
      },
      {
        "status": "affected",
        "version": "EMUI 9.1.0"
      },
      {
        "status": "affected",
        "version": "EMUI 8.2"
      },
      {
        "status": "affected",
        "version": "EMUI 8.0"
      },
      {
        "status": "affected",
        "version": "Magic UI 4.0.0"
      },
      {
        "status": "affected",
        "version": "Magic UI 3.1.1"
      },
      {
        "status": "affected",
        "version": "Magic UI 3.1.0"
      },
      {
        "status": "affected",
        "version": "Magic UI 3.0.0"
      },
      {
        "status": "affected",
        "version": "Magic UI 2.1.1"
      }
    ]
  }
]

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS

0.001

Percentile

42.5%

Related for CVE-2020-9158