Authorization

2019-11-2921:15:00

PRIOn knowledge base

www.prio-n.com

3.8 Low

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

25.0%

JSON

Mate 20 RS smartphones with versions earlier than 9.1.0.135(C786E133R3P1) have an improper authorization vulnerability. The software does not properly restrict certain operation in ADB mode, successful exploit could allow the attacker to switch to third desktop after a series of operation.

CPENameOperatorVersion
mate_20_rs_firmwareeq< 9.1.0.135c786e133r3p1

CPE	Name	Operator	Version
	mate_20_rs_firmware	eq	< 9.1.0.135c786e133r3p1

References

www.huawei.com/en/psirt/security-advisories/huawei-sa-20191127-01-smartphone-en