CVSS 3.1
6.8 mediumCVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HCVE-2020-9081
Medium (6.8) in huawei. EPSS 0.2% chance of exploitation in the next 30 days.
There is an improper authorization vulnerability in some Huawei smartphones. An attacker could perform a series of operation in specific mode to exploit this vulnerability. Successful exploit could allow the attacker to bypass app lock. (Vulnerability ID: HWPSIRT-2019-12144)
This vulnerability has been assigned a Common Vulnerabilities and Exposures (CVE) ID: CVE-2020-9081.
Severity
- EPSS
- 0.2% chance of exploitation in the next 30 days; higher than 10% of CVEs (scores of 2026-10-31)
- CWEs
- CWE-863, CWE-285
- Published
- Modified
- Record from
- the NVD, synced
Affected
- huawei:mate_20_firmware
- huawei:p30_firmware
- huawei:p30_pro_firmware
- huawei:princeton-al10d_firmware
- huawei:yale-al00a_firmware
- huawei:yale-al50a_firmware
- huawei:yalep-al10b_firmware