High severity · published May 15, 2020
CVE-2020-1808
Honor 20;HONOR 20 PRO;Honor Magic2;HUAWEI Mate 20 X;HUAWEI P30;HUAWEI P30 Pro;Honor View 20 smartphones with versions earlier than 10.0.0.187(C00E60R4P11); versions earlier than…
7.1
CVSS
0.5%
EPSS
No
On KEV
Description
Honor 20;HONOR 20 PRO;Honor Magic2;HUAWEI Mate 20 X;HUAWEI P30;HUAWEI P30 Pro;Honor View 20 smartphones with versions earlier than 10.0.0.187(C00E60R4P11); versions earlier than 10.0.0.187(C00E60R4P11); versions earlier than 10.0.0.176(C00E60R2P11);9.1.0.135(C00E133R2P1); versions earlier than 10.1.0.123(C431E22R3P5), versions earlier than 10.1.0.126(C636E5R3P4), versions earlier than 10.1.0.160(C00E160R2P11); versions earlier than 10.1.0.126(C185E8R5P1), versions earlier than 10.1.0.126(C636E9R2P4), versions earlier than 10.1.0.160(C00E160R2P8); versions earlier than 10.0.0.179(C636E3R4P3), versions earlier than 10.0.0.180(C185E3R3P3), versions earlier than 10.0.0.180(C432E10R3P4), versions earlier than 10.0.0.181(C675E5R1P2) have an out of bound read vulnerability. The software reads data past the end of the intended buffer. The attacker tricks the user into installing a crafted application, successful exploit may cause information disclosure or service abnormal.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H
Attack vector
Local
Complexity
Low
Privileges
None
User interaction
Required
Confidentiality
High
Integrity
None
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.5% · higher than 45% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
H2
Honor 20 Firmware · Huawei
before 10.0.0.187\(c00e60r4p11\) · source: NVD
H2
Honor 20 Pro Firmware · Huawei
before 10.0.0.187\(c00e60r4p11\) · source: NVD
HM
Honor Magic2 Firmware · Huawei
before 10.0.0.176\(c00e60r2p11\) · source: NVD
HV
Honor View 20 Firmware · Huawei
before 10.0.0.179\(c636e3r4p3\); before 10.0.0.180\(c185e3r3p3\); before 10.0.0.180\(c432e10r3p4\); before 10.0.0.188\(c00e62r2p11\) · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2020-1808
CVE.org
https://www.cve.org/CVERecord?id=CVE-2020-1808
Vendor Advisory
https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200513-02-smartphone-en
More from Honor 20 Firmware
6.8
CVE-2020-9244
HUAWEI Mate 20 versions Versions earlier than 10.1.0.160(C00E160R3P8);HUAWEI Mate 20 Pro versions Versions earlier than 10.1.0.270(C431E7R1P5),Versions earlier than…
5.3
CVE-2020-9074
Huawei Smartphones HONOR 20 PRO;Honor View 20;HONOR 20 have an improper handling of exceptional condition Vulnerability
5.3
CVE-2019-5303
There are two denial of service vulnerabilities on some Huawei smartphones
5.3
CVE-2019-5302
There are two denial of service vulnerabilities on some Huawei smartphones