CVE-2020-9258

MEDIUM

5.5

Description

HUAWEI P30 smartphone with versions earlier than 10.1.0.135(C00E135R2P11) have an improper input verification vulnerability. An attribution in a module is not set correctly and some verification is lacked. Attackers with local access can exploit this vulnerability by injecting malicious fragment. This may lead to user information leak.

Details CVE

Score CVSS v3.15.5

SeveriteMEDIUM

Vecteur CVSSCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Vecteur d'attaqueLOCAL

ComplexiteLOW

Privileges requisNONE

Interaction utilisateurREQUIRED

Publie7/10/2020

Derniere modification11/21/2024

Sourcenvd

Observations honeypot0

Produits affectes

huawei:p30huawei:p30_firmware

Faiblesses (CWE)

CWE-20

References

https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200708-02-smartphone-en(psirt@huawei.com)

https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200708-02-smartphone-en(af854a3a-2127-422b-91ae-364da2661108)

Correlations IOC

Aucune correlation enregistree

This product uses data from the NVD API but is not endorsed or certified by the NVD.