5.5

CVE-2020-9239

Huawei smartphones BLA-A09 versions 8.0.0.123(C212),versions earlier than 8.0.0.123(C567),versions earlier than 8.0.0.123(C797);BLA-TL00B versions earlier than 8.1.0.326(C01);Berkeley-L09 versions earlier than 8.0.0.163(C10),versions earlier than 8.0.0.163(C432),Versions earlier than 8.0.0.163(C636),Versions earlier than 8.0.0.172(C10);Duke-L09 versions Duke-L09C10B187, versions Duke-L09C432B189, versions Duke-L09C636B189;HUAWEI P20 versions earlier than 8.0.1.16(C00);HUAWEI P20 Pro versions earlier than 8.1.0.152(C00);Jimmy-AL00A versions earlier than Jimmy-AL00AC00B172;LON-L29D versions LON-L29DC721B192;NEO-AL00D versions earlier than 8.1.0.172(C786);Stanford-AL00 versions Stanford-AL00C00B123;Toronto-AL00 versions earlier than Toronto-AL00AC00B225;Toronto-AL00A versions earlier than Toronto-AL00AC00B225;Toronto-TL10 versions earlier than Toronto-TL10C01B225 have an information vulnerability. A module has a design error that is lack of control of input. Attackers can exploit this vulnerab
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Huawei ≫ Bla-a09 Firmware Version 8.0.0.123(c212)
   Huawei ≫ Bla-a09 Version -
Huawei ≫ Bla-a09 Firmware Version < 8.0.0.123\(c567\)
   Huawei ≫ Bla-a09 Version -
Huawei ≫ Bla-a09 Firmware Version < 8.0.0.123\(c797\)
   Huawei ≫ Bla-a09 Version -
Huawei ≫ Bla-tl00b Firmware Version < 8.1.0.326\(c01\)
   Huawei ≫ Bla-tl00b Version -
Huawei ≫ Berkeley-l09 Firmware Version < 8.0.0.163\(c10\)
   Huawei ≫ Berkeley-l09 Version -
Huawei ≫ Berkeley-l09 Firmware Version <= 8.0.0.163\(c432\)
   Huawei ≫ Berkeley-l09 Version -
Huawei ≫ Berkeley-l09 Firmware Version < 8.0.0.163\(c636\)
   Huawei ≫ Berkeley-l09 Version -
Huawei ≫ Berkeley-l09 Firmware Version < 8.0.0.172\(c10\)
   Huawei ≫ Berkeley-l09 Version -
Huawei ≫ Duke-l09 Firmware Version duke-l09c10b187
   Huawei ≫ Duke-l09 Version -
Huawei ≫ Duke-l09 Firmware Version duke-l09c432b189
   Huawei ≫ Duke-l09 Version -
Huawei ≫ Duke-l09 Firmware Version duke-l09c636b189
   Huawei ≫ Duke-l09 Version -
Huawei ≫ P20 Firmware Version < 8.0.1.16\(c00\)
   Huawei ≫ P20 Version -
Huawei ≫ P20 Pro Firmware Version < 8.1.0.152\(c00\)
   Huawei ≫ P20 Pro Version -
Huawei ≫ Jimmy-al00a Firmware Version < jimmy-al00ac00b172
   Huawei ≫ Jimmy-al00a Version -
Huawei ≫ Lon-l29d Firmware Version lon-l29dc721b192
   Huawei ≫ Lon-l29d Version -
Huawei ≫ Neo-al00d Firmware Version < 8.1.0.172\(c786\)
   Huawei ≫ Neo-al00d Version -
Huawei ≫ Stanford-al00 Firmware Version stanford-al00c00b123
   Huawei ≫ Stanford-al00 Version -
Huawei ≫ Toronto-al00 Firmware Version < toronto-al00ac00b225
   Huawei ≫ Toronto-al00 Version -
Huawei ≫ Toronto-al00a Firmware Version < toronto-al00ac00b225
   Huawei ≫ Toronto-al00a Version -
Huawei ≫ Toronto-tl10 Firmware Version < toronto-tl10c01b225
   Huawei ≫ Toronto-tl10 Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.24% 0.151
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 5.5 1.8 3.6
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
NIST 2.1 3.9 2.9
AV:L/AC:L/Au:N/C:P/I:N/A:N
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200909-04-smartphone-en
Vendor Advisory