High severity · published Dec 7, 2020
CVE-2020-9247
There is a buffer overflow vulnerability in several Huawei products
7.8
CVSS
0.8%
EPSS
No
On KEV
Description
There is a buffer overflow vulnerability in several Huawei products. The system does not sufficiently validate certain configuration parameter which is passed from user that would cause buffer overflow. The attacker should trick the user into installing and running a malicious application with a high privilege, successful exploit may cause code execution. Affected product include Huawei HONOR 20 PRO, Mate 20, Mate 20 Pro, Mate 20 X, P30, P30 Pro, Hima-L29C, Laya-AL00EP, Princeton-AL10B, Tony-AL00B, Yale-L61A, Yale-TL00B and YaleP-AL10B.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Attack vector
Local
Complexity
Low
Privileges
None
User interaction
Required
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.8% · higher than 57% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
HF
Hima-l29c Firmware · Huawei
before 10.1.0.273\(c185e5r2p4\); before 10.1.0.273\(c636e5r2p4\); before 10.1.0.275\(c10e4r2p4\) · source: NVD
H2
Honor 20 Pro Firmware · Huawei
before 10.1.0.230\(c432e9r5p1\); before 10.1.0.231\(c10e3r3p2\) · source: NVD
LF
Laya-al00ep Firmware · Huawei
before 10.1.0.160\(c786e160r3p8\) · source: NVD
M2
Mate 20 Firmware · Huawei
before 10.1.0.160\(c00e160r3p8\) · source: NVD
M2
Mate 20 Pro Firmware · Huawei
before 10.1.0.270\(c432e7r1p5\); before 10.1.0.270\(c635e3r1p5\); before 10.1.0.273\(c185e7r2p4\); before 10.1.0.273\(c636e7r2p4\); before 10.1.0.277\(c10e7r2p4\); before 10.1.0.277\(c605e7r1p5\) · source: NVD
M2
Mate 20 X Firmware · Huawei
before 10.1.0.160\(c00e160r2p8\) · source: NVD
PF
P30 Firmware · Huawei
9.1.0.272(c635e4r2p2); before 10.1.0.123\(c432e22r2p5\); before 10.1.0.126\(c10e7r5p1\); before 10.1.0.126\(c185e4r7p1\); before 10.1.0.126\(c605e19r1p3\); before 10.1.0.126\(c636e5r3p4\); +1 more · source: NVD
PP
P30 Pro Firmware · Huawei
before 10.1.0.160\(c00e160r2p8\) · source: NVD
PF
Princeton-al10b Firmware · Huawei
before 10.1.0.160\(c00e160r2p11\) · source: NVD
TF
Tony-al00b Firmware · Huawei
before 10.1.0.160\(c00e160r2p11\) · source: NVD
YF
Yale-l61a Firmware · Huawei
before 10.1.0.225\(c432e3r1p2\); before 10.1.0.226\(c10e3r1p1\) · source: NVD
YF
Yale-tl00b Firmware · Huawei
before 10.1.0.160\(c01e160r8p12\) · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2020-9247
CVE.org
https://www.cve.org/CVERecord?id=CVE-2020-9247
Vendor Advisory
https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200729-03-smartphone-en
More from Hima-l29c Firmware
7.8
CVE-2019-5282
Bastet module of some Huawei smartphones with Versions earlier than Emily-AL00A 9.0.0.182(C00E82R1P21), Versions earlier than Emily-TL00B 9.0.0.182(C01E82R1P21), Versions earlier…
4.6
CVE-2021-22440
There is a path traversal vulnerability in some Huawei products