Vulnerabilities > CVE-2020-1882 - Unspecified vulnerability in Huawei products

CVSS 4.6 - MEDIUM

Attack vector

PHYSICAL

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

HIGH

Availability impact

NONE

low complexity

huawei

NVD

Published: 2020-02-18

Updated: 2021-07-21

Summary

Huawei mobile phones Ever-L29B versions earlier than 10.0.0.180(C185E6R3P3), earlier than 10.0.0.180(C432E6R1P7), earlier than 10.0.0.180(C636E5R2P3); HUAWEI Mate 20 RS versions earlier than 10.0.0.175(C786E70R3P8); HUAWEI Mate 20 X versions earlier than 10.0.0.176(C00E70R2P8); and Honor Magic2 versions earlier than 10.0.0.175(C00E59R2P11) have an improper authorization vulnerability. Due to improper authorization of some function, attackers can bypass the authorization to perform some operations.

Vulnerable Configurations

Part	Description	Count
OS	Huawei Huawei Mate 20 RS Firmware - Huawei Mate 20 RS Firmware 9.1.0.135\(C786E133R3P1\) Huawei Mate 20 X Firmware - Huawei Mate 20 X Firmware 9.1.0.135\(C00E133R2P1\) Huawei Honor Magic2 Firmware - Huawei Ever L29B Firmware 9.0.0.206\(C185E3R3P1\) Huawei Ever L29B Firmware 9.0.0.207\(C636E3R2P1\) Huawei Ever L29B Firmware 9.0.0.208\(C432E3R1P12\) Huawei Ever L29B Firmware 9.1.0.310\(C432E3R1P12\) Huawei Ever L29B Firmware 9.1.0.310\(C636E3R2P1\) Huawei Ever L29B Firmware 9.1.0.311\(C185E3R3P1\) Huawei Ever L29B Firmware 10.0.0.180\(C185E6R3P3\) Huawei Ever L29B Firmware 10.0.0.180\(C432E6R1P7\)	13
Hardware	Huawei Huawei Mate 20 RS - Huawei Mate 20 X - Huawei Honor Magic2 - Huawei Ever L29B -	4

References

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200122-01-phone-en