CVE-2020-9066

2020-03-2614:25:10

huawei

www.cve.org

AI Score

7.7

Confidence

High

EPSS

0.001

Percentile

26.0%

JSON

Huawei smartphones OxfordP-AN10B with versions earlier than 10.0.1.169(C00E166R4P1) have an improper authentication vulnerability. The Application doesn’t perform proper authentication when user performs certain operations. An attacker can trick user into installing a malicious plug-in to exploit this vulnerability. Successful exploit could allow the attacker to bypass the authentication to perform unauthorized operations.

CNA Affected

[
  {
    "product": "OxfordP-AN10B",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Versions earlier than 10.0.1.169(C00E166R4P1)"
      }
    ]
  }
]

References

www.huawei.com/en/psirt/security-advisories/huawei-sa-20200325-01-phone