CVE-2020-1787

HUAWEI Mate 20 smartphones versions earlier than 9.1.0.139C00E133R3P1 have an improper authentication vulnerability. The system has a logic error under certain scenario, successful exploit could allow the attacker who gains the privilege of guest user to access to the host user's desktop in an...

Authentication flaw

HUAWEI Mate 20 smartphones versions earlier than 9.1.0.139C00E133R3P1 have an improper authentication vulnerability. The system has a logic error under certain scenario, successful exploit could allow the attacker who gains the privilege of guest user to access to the host user's desktop in an...

CVE-2020-1786

Huawei Mate 20 Pro devices with firmware versions earlier than 10.0.0.175 (C00E69R3P8) are affected by an improper authentication vulnerability due to insufficient validation of the APK file name in a specific condition. This could allow an attacker to forge a crafted application as a legitimate ...

CVE-2020-1786

HUAWEI Mate 20 Pro smartphones versions earlier than 10.0.0.175C00E69R3P8 have an improper authentication vulnerability. The software does not sufficiently validate the name of apk file in a special condition which could allow an attacker to forge a crafted application as a normal one. Successful...

CVE-2020-1787

HUAWEI Mate 20 smartphones versions earlier than 9.1.0.139C00E133R3P1 have an improper authentication vulnerability. The system has a logic error under certain scenario, successful exploit could allow the attacker who gains the privilege of guest user to access to the host user's desktop in an...

CVE-2020-1787

Summary : CVE-2020-1787 affects Huawei Mate 20 smartphones with firmware earlier than 9.1.0.139 (C00E133R3P1). The issue is an improper authentication due to a logic error that, in certain scenarios, could let a guest user gain access to the host user’s desktop instantly without unlocking the scr...

CVE-2020-1785

Mate 10 Pro;Honor V10;Honor 10;Nova 4 smartphones have a denial of service vulnerability. The system does not properly check the status of certain module during certain operations, an attacker should trick the user into installing a malicious application, successful exploit could cause reboot of...

Denial of service

Mate 10 Pro;Honor V10;Honor 10;Nova 4 smartphones have a denial of service vulnerability. The system does not properly check the status of certain module during certain operations, an attacker should trick the user into installing a malicious application, successful exploit could cause reboot of...

CVE-2020-1785

The CVE-2020-1785 issue affects Huawei/Mate 10 Pro, Honor V10/10 and Nova 4 smartphones. The root cause is a denial-of-service vulnerability where the system fails to properly check the status of a specific module during certain operations, enabling an attacker to trick a user into installing a m...

Denial of Service Vulnerability in Multiple Huawei Products (CNVD-2020-02948)

Huawei Honor V10 and others are products of Huawei, a Chinese company.Huawei Honor V10 is a smartphone product.Huawei Honor 10 is a smartphone product.Mate 10 Pro is a smartphone product. A denial-of-service vulnerability exists in multiple huawei phones. the vulnerability stems from the system...

CVE-2019-5264

There is an information disclosure vulnerability in certain Huawei smartphones Mate 10;Mate 10 Pro;Honor V10;Changxiang 7S;P-smart;Changxiang 8 Plus;Y9 2018;Honor 9 Lite;Honor 9i;Mate 9. The software does not properly handle certain information of applications locked by applock in a rare conditio...

CVE-2019-5264

There is an information disclosure vulnerability in certain Huawei smartphones Mate 10;Mate 10 Pro;Honor V10;Changxiang 7S;P-smart;Changxiang 8 Plus;Y9 2018;Honor 9 Lite;Honor 9i;Mate 9. The software does not properly handle certain information of applications locked by applock in a rare conditio...

CVE-2019-5250

Mate 20 Pro smartphones with versions earlier than 9.1.0.135C00E133R3P1 have an improper authorization vulnerability. The software does not properly restrict certain operation of certain privilege, the attacker could trick the user into installing a malicious application before the user turns on...

CVE-2019-5250

Mate 20 Pro smartphones with versions earlier than 9.1.0.135C00E133R3P1 have an improper authorization vulnerability. The software does not properly restrict certain operation of certain privilege, the attacker could trick the user into installing a malicious application before the user turns on...

Authorization

Mate 20 Pro smartphones with versions earlier than 9.1.0.135C00E133R3P1 have an improper authorization vulnerability. The software does not properly restrict certain operation of certain privilege, the attacker could trick the user into installing a malicious application before the user turns on...

CVE-2019-5250

Mate 20 Pro smartphones with versions earlier than 9.1.0.135C00E133R3P1 have an improper authorization vulnerability. The software does not properly restrict certain operation of certain privilege, the attacker could trick the user into installing a malicious application before the user turns on...

CVE-2019-5250

CVE-2019-5250 affects Huawei Mate 20 Pro devices running before version 9.1.0.135 (C00E133R3P1). The issue is an improper authorization where certain privileged operations are not properly restricted, enabling an attacker to trick the user into installing a malicious app before enabling the stude...

Huawei Mate 20 Pro Authorization Issue Vulnerability

Huawei Mate 20 Pro is a smartphone from Chinese company Huawei Huawei. An authorization issue vulnerability exists in previous versions of Huawei Mate 20 Pro 9.1.0.135 C00E133R3P1, which can be exploited by an attacker to bypass the limitations of the student mode feature by tricking that user in...

CVE-2019-5308

Mate 20 RS smartphones with versions earlier than 9.1.0.135C786E133R3P1 have an improper authorization vulnerability. The software does not properly restrict certain operation in ADB mode, successful exploit could allow the attacker to switch to third desktop after a series of operation...

CVE-2019-5308

Mate 20 RS smartphones with versions earlier than 9.1.0.135C786E133R3P1 have an improper authorization vulnerability. The software does not properly restrict certain operation in ADB mode, successful exploit could allow the attacker to switch to third desktop after a series of operation...