Vulnerabilities > CVE-2020-9074 - Improper Handling of Exceptional Conditions vulnerability in Huawei products

CVSS 5.3 - MEDIUM

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

NONE

Availability impact

LOW

network

low complexity

huawei

CWE-755

NVD

Published: 2020-06-05

Updated: 2020-06-10

Summary

Huawei Smartphones HONOR 20 PRO;Honor View 20;HONOR 20 have an improper handling of exceptional condition Vulnerability. A component cannot deal with an exception correctly. Attackers can exploit this vulnerability by sending malformed message. This could compromise normal service of affected phones.

Vulnerable Configurations

Part	Description	Count
OS	Huawei Huawei Honor 20 PRO Firmware 10.0.0.187\(C00E60R4P11\) Huawei Honor 20 PRO Firmware 10.0.0.194\(C00E62R8P12\) Huawei Honor 20 PRO Firmware 10.0.0.194\(C10E3R3P2\) Huawei Honor 20 PRO Firmware 10.0.0.194\(C432E9R5P1\) Huawei Honor View 20 Firmware - Huawei Honor View 20 Firmware 9.1.0.238\(C432E1R3P1\) Huawei Honor View 20 Firmware 10.0.0.179\(C636E3R4P3\) Huawei Honor View 20 Firmware 10.0.0.180\(C185E3R3P3\) Huawei Honor View 20 Firmware 10.0.0.180\(C432E10R3P4\) Huawei Honor View 20 Firmware 10.0.0.188\(C00E62R2P11\) Huawei Honor View 20 Firmware 10.0.0.195\(C00E62R4P11\) Huawei Honor View 20 Firmware 10.0.0.195\(C636E3R4P3\) Huawei Honor View 20 Firmware 10.0.0.198\(C432E10R3P4\) Huawei Honor View 20 Firmware 10.0.0.200\(C185E3R3P3\) Huawei Honor View 20 Firmware 10.0.0.201\(C10E5R4P3\) Huawei Honor 20 Firmware 9.1.0.152\(C00E150R5P1\) Huawei Honor 20 Firmware 10.0.0.175\(C00E58R4P11\) Huawei Honor 20 Firmware 10.0.0.186\(C185E2R2P1\) Huawei Honor 20 Firmware 10.0.0.187\(C00E60R4P11\)	19
Hardware	Huawei Huawei Honor 20 PRO - Huawei Honor View 20 - Huawei Honor 20 -	3

Common Weakness Enumeration (CWE)

CWE-755 - Improper Handling of Exceptional Conditions

References

https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200603-01-smartphone-en