Login Request a demo
Low severity · published Mar 20, 2020
CVE-2020-1795
There is a logic error vulnerability in several smartphones
2.4
CVSS
0.2%
EPSS
No
On KEV
Description
There is a logic error vulnerability in several smartphones. The software does not properly restrict certain operation when the Digital Balance function is on. Successful exploit could allow the attacker to bypass the Digital Balance limit after a series of operations.Affected product versions include:HUAWEI Mate 20 versions Versions earlier than 10.0.0.188(C00E74R3P8);HUAWEI Mate 30 Pro versions Versions earlier than 10.0.0.203(C00E202R7P2).
CVSS vector
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Attack vector
Physical
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
None
Integrity
Low
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 12% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
M2
Mate 20 Firmware · Huawei
before 10.0.0.188\(c00e74r3p8\) · source: NVD
M3
Mate 30 Pro Firmware · Huawei
before 10.0.0.203\(c00e202r7p2\) · source: NVD
Affected product
M2
Mate 20 Firmware
Huawei
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2020-1795
CVE.org
https://www.cve.org/CVERecord?id=CVE-2020-1795
Vendor Advisory
https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200318-04-smartphone-en
More from Mate 20 Firmware
8.8
CVE-2020-0022
In reassemble_and_dispatch of packet_fragmenter.cc, there is possible out of bounds write due to an incorrect bounds calculation
8.0
CVE-2020-9113
HUAWEI Mate 20 versions earlier than 10.0.0.188(C00E74R3P8) have a buffer overflow vulnerability in the Bluetooth module
7.8
CVE-2020-9247
There is a buffer overflow vulnerability in several Huawei products
7.8
CVE-2019-5225
P30, Mate 20, P30 Pro smartphones with software of versions earlier than ELLE-AL00B 9.1.0.193(C00E190R1P21), versions earlier than Hima-AL00B 9.1.0.135(C00E200R2P1), versions…
6.8
CVE-2020-9081
There is an improper authorization vulnerability in some Huawei smartphones