CVE-2020-1840

HUAWEI Mate 20 smart phones with versions earlier than 10.0.0.175(C00E70R3P8) have an insufficient authentication vulnerability. A local attacker with high privilege can execute a specific command to exploit this vulnerability. Successful exploitation may cause information leak and compromise the availability of the smart phones.Affected product versions include: HUAWEI Mate 20 versions Versions earlier than 10.0.0.175(C00E70R3P8)
Severity
MEDIUM
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:H
Atk. Vector
LOCAL
Atk. Complexity
LOW
Priv. Required
HIGH
Base Score
CVSS 3.x
EPSS Score
Percentile: Unknown
VendorProductVersion
huaweimate_20_firmware
𝑥
≤ 10.0.0.175\(c00e70r3p8\)
𝑥
= Vulnerable software versions