4.6
CVE-2020-9110
- EPSS 0.03%
- Veröffentlicht 12.10.2020 15:15:12
- Zuletzt bearbeitet 21.11.2024 05:40:03
- Quelle psirt@huawei.com
- CVE-Watchlists
- Unerledigt
LoginTaurus-AN00B versions earlier than 10.1.0.156(C00E155R7P2) have an information disclosure vulnerability. The device does not sufficiently validate the output of device in certain specific scenario, the attacker can gain information in the victim's smartphone to launch the attack, successful exploit could cause information disclosure.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Huawei ≫ Taurus-an00b Firmware Version < 10.1.0.156
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.03% | 0.052 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 4.6 | 0.9 | 3.6 |
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
|
| nvd@nist.gov | 2.1 | 3.9 | 2.9 |
AV:L/AC:L/Au:N/C:P/I:N/A:N
|
CWE-20 Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.