CVE-2020-1787 - HUAWEI Mate 20 smartphones versions earlier than 9.1.0.139(C00E133R3P1) have an improper authentication vulnerability

Back Back to CVE browser

MEDIUM

HUAWEI Mate 20 smartphones versions earlier than 9.1.0.139(C00E133R3P1) have an improper authentication vulnerability

Published Jan 9, 2020

6.6

MEDIUM

CVSS 3.1

EPSS 0.26%

Description

HUAWEI Mate 20 smartphones versions earlier than 9.1.0.139(C00E133R3P1) have an improper authentication vulnerability. The system has a logic error under certain scenario, successful exploit could allow the attacker who gains the privilege of guest user to access to the host user's desktop in an instant, without unlocking the screen lock of the host user.

Affected products

Vendor Huawei Product HUAWEI Mate 20 Default
unknown
Affected
- Versions earlier than 9.1.0.139(C00E133R3P1)

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
Huawei	HUAWEI Mate 20	unknown	Affected Versions earlier than 9.1.0.139(C00E133R3P1)

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-287

Improper Authentication

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-12613
Advisory
https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200108-02-smartphone-en
x_refsource_CONFIRMVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-12613		Advisory
https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200108-02-smartphone-en		x_refsource_CONFIRMVendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner huawei

Published Jan 9, 2020

Updated Aug 4, 2024

Reserved Nov 29, 2019

Link CVE-2020-1787

CISA Vulnrichment

No data

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2020-1787

Red Hat

No data

ENISA EUVD

Assigner huawei

Published Jan 9, 2020

Updated Aug 4, 2024

Link EUVD-2020-12613

GitHub

No data