CVE-2020-9250

3.3 lowEPSS 0.1%

There is an insufficient authentication vulnerability in some Huawei smart phone. An unauthenticated, local attacker can crafts software package to exploit this vulnerability. Due to insufficient verification, successful exploitation may impact the service. (Vulnerability ID: HWPSIRT-2019-12302) This vulnerability has been assigned a Common Vulnerabilities and Exposures (CVE) ID: CVE-2020-9250.

Severity

CVSS 3.1

3.3 low

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

EPSS: 0.1% chance of exploitation in the next 30 days; higher than 1% of CVEs (scores of 2026-10-31)
CWEs: CWE-287, CWE-522
Published: 2024-12-20
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

huawei:mate_20_pro_firmware

References

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200729-01-smartphone-en

Check your stack JSON