6.8

CVE-2020-9244

HUAWEI Mate 20 versions Versions earlier than 10.1.0.160(C00E160R3P8);HUAWEI Mate 20 Pro versions Versions earlier than 10.1.0.270(C431E7R1P5),Versions earlier than 10.1.0.270(C635E3R1P5),Versions earlier than 10.1.0.273(C636E7R2P4);HUAWEI Mate 20 X versions Versions earlier than 10.1.0.160(C00E160R2P8);HUAWEI P30 versions Versions earlier than 10.1.0.160(C00E160R2P11);HUAWEI P30 Pro versions Versions earlier than 10.1.0.160(C00E160R2P8);HUAWEI Mate 20 RS versions Versions earlier than 10.1.0.160(C786E160R3P8);HonorMagic2 versions Versions earlier than 10.0.0.187(C00E61R2P11);Honor20 versions Versions earlier than 10.0.0.175(C00E58R4P11);Honor20 PRO versions Versions earlier than 10.0.0.194(C00E62R8P12);HonorMagic2 versions Versions earlier than 10.0.0.187(C00E61R2P11);HonorV20 versions Versions earlier than 10.0.0.188(C00E62R2P11) have an improper authentication vulnerability. The system does not properly sign certain encrypted file, the attacker should gain the key used to encrypt the file, successful exploit could cause certain file be forged

Daten sind bereitgestellt durch National Vulnerability Database (NVD)
HuaweiMate 20 Firmware Version < 10.1.0.160\(c00e160r3p8\)
   HuaweiMate 20 Version-
HuaweiMate 20 Pro Firmware Version < 10.1.0.270\(c431e7r1p5\)
   HuaweiMate 20 Pro Version-
HuaweiMate 20 X Firmware Version < 10.1.0.160\(c00e160r2p8\)
   HuaweiMate 20 X Version-
HuaweiP30 Firmware Version < 10.1.0.160\(c00e160r2p11\)
   HuaweiP30 Version-
HuaweiP30 Pro Firmware Version < 10.1.0.160\(c00e160r2p8\)
   HuaweiP30 Pro Version-
HuaweiMate 20 Rs Firmware Version < 10.1.0.160\(c786e160r3p8\)
   HuaweiMate 20 Rs Version-
HuaweiHonor Magic 2 Firmware Version < 10.0.0.187\(c00e61r2p11\)
   HuaweiHonor Magic 2 Version-
HuaweiHonor 20 Firmware Version < 10.0.0.175\(c00e58r4p11\)
   HuaweiHonor 20 Version-
HuaweiHonor 20 Pro Firmware Version < 10.0.0.194\(c00e62r8p12\)
   HuaweiHonor 20 Pro Version-
HuaweiHonor V20 Firmware Version < 10.0.0.188\(c00e62r2p11\)
   HuaweiHonor V20 Version-
HuaweiMate 20 Pro Firmware Version < 10.1.0.270\(c635e3r1p5\)
   HuaweiMate 20 Pro Version-
HuaweiMate 20 Pro Firmware Version < 10.1.0.273\(c636e7r2p4\)
   HuaweiMate 20 Pro Version-
HuaweiHonor Magic 2 Firmware Version < 10.0.0.187\(c00e61r2p11\)
   HuaweiHonor Magic 2 Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.03% 0.042
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 6.8 0.9 5.9
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvd@nist.gov 4.6 3.9 6.4
AV:L/AC:L/Au:N/C:P/I:P/A:P