CVE-2020-1796

2020-03-2014:54:56

huawei

www.cve.org

0.0004 Low

EPSS

Percentile

12.8%

JSON

There is an improper authorization vulnerability in several smartphones. The software incorrectly performs an authorization to certain user, successful exploit could allow a low privilege user to do certain operation which the user are supposed not to do.Affected product versions include:HUAWEI Mate 20 versions Versions earlier than 10.0.0.188(C00E74R3P8);HUAWEI Mate 30 Pro versions Versions earlier than 10.0.0.203(C00E202R7P2).

CNA Affected

[
  {
    "product": "HUAWEI Mate 20;HUAWEI Mate 30 Pro",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Versions earlier than 10.0.0.188(C00E74R3P8)"
      },
      {
        "status": "affected",
        "version": "Versions earlier than 10.0.0.203(C00E202R7P2)"
      }
    ]
  }
]

References

www.huawei.com/en/psirt/security-advisories/huawei-sa-20200318-05-smartphone-en

0.0004 Low

EPSS

Percentile

12.8%

JSON

Related for CVELIST:CVE-2020-1796