CVE-2020-9070

2020-04-2019:33:22

huawei

www.cve.org

5.3 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

29.9%

JSON

Huawei smartphones Taurus-AL00B with versions earlier than 10.0.0.205(C00E201R7P2) have an improper authentication vulnerability. The software insufficiently validate the user’s identity when a user wants to do certain operation. An attacker can trick user into installing a malicious application to exploit this vulnerability. Successful exploit may cause some information disclosure.

CNA Affected

[
  {
    "product": "Taurus-AL00B",
    "vendor": "Huawei",
    "versions": [
      {
        "status": "affected",
        "version": "Versions earlier than 10.0.0.205(C00E201R7P2)"
      }
    ]
  }
]