Mate 30 Pro Firmware
CVE-2020-9256
MEDIUM
Severity by source
AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Lifecycle Timeline
1DescriptionNVD
Huawei Mate 30 Pro smartphones with versions earlier than 10.1.0.150(C00E136R5P3) have an improper authorization vulnerability. The system does not properly restrict the use of system service by applications, the attacker should trick the user into installing a malicious application, successful exploit could cause a denial of audio service.
AnalysisAI
Huawei Mate 30 Pro smartphones with versions earlier than 10.1.0.150(C00E136R5P3) have an improper authorization vulnerability. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
Technical ContextAI
Huawei Mate 30 Pro smartphones with versions earlier than 10.1.0.150(C00E136R5P3) have an improper authorization vulnerability. The system does not properly restrict the use of system service by applications, the attacker should trick the user into installing a malicious application, successful exploit could cause a denial of audio service. Affected products include: Huawei Mate 30 Pro Firmware.
RemediationAI
No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.
More in Mate 30 Pro Firmware
View allIn reassemble_and_dispatch of packet_fragmenter.cc, there is possible out of bounds write due to an incorrect bounds cal
There is an improper authorization vulnerability in several smartphones. Rated medium severity (CVSS 6.6), this vulnerab
There is a privilege escalation vulnerability on some Huawei smart phones due to design defects. Rated medium severity (
HUAWEI Mate 30 Pro with versions earlier than 10.1.0.150(C00E136R5P3) have is an improper authentication vulnerability.
There is an improper authentication vulnerability in several smartphones. Rated medium severity (CVSS 5.5), this vulnera
There is an improper authentication vulnerability in several smartphones. Rated medium severity (CVSS 4.6), this vulnera
There is an improper authentication vulnerability in several smartphones. Rated medium severity (CVSS 4.6), this vulnera
There is a logic error vulnerability in several smartphones. Rated low severity (CVSS 2.4), this vulnerability is no aut
Same technique Information Disclosure
View allShare
External POC / Exploit Code
Leaving vuln.today