Authentication flaw

2020-03-2015:15:00

PRIOn knowledge base

www.prio-n.com

5.4 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

12.6%

JSON

Huawei smartphone OxfordS-AN00A with versions earlier than 10.0.1.152D(C735E152R3P3),versions earlier than 10.0.1.160(C00E160R4P1) have an improper authentication vulnerability. Authentication to target component is improper when device performs an operation. Attackers exploit this vulnerability to obtain some information by loading malicious application, leading to information leak.

CPENameOperatorVersion
oxfords-an00a_firmwareeq> 10.0.1.152dc735e152r3p3 AND < 10.0.1.160c0e160r4p1
oxfords-an00a_firmwareeq< 10.0.1.152dc735e152r3p3

CPE	Name	Operator	Version
	oxfords-an00a_firmware	eq	> 10.0.1.152dc735e152r3p3 AND < 10.0.1.160c0e160r4p1
	oxfords-an00a_firmware	eq	< 10.0.1.152dc735e152r3p3

References

www.huawei.com/en/psirt/security-advisories/huawei-sa-20200415-02-dos-en

www.huawei.com/en/psirt/security-advisories/huawei-sa-20200311-01-informationleak-en