CVE-2020-9252 - HUAWEI Mate 20 versions earlier than 10.1.0.160(C00E160R3P8), HUAWEI Mate 20 X versions earlier than 10.1.0.135(C00E135R2P8), HUAWEI Mate 20 RS versions earlier than 10.1.0.160(C786E160R3P8), and Honor Magic2 smartphones versions earlier than 10.1.0.160(C00E160R2P11) have a path traversal vulnerability

Back Back to CVE browser

LOW

HUAWEI Mate 20 versions earlier than 10.1.0.160(C00E160R3P8), HUAWEI Mate 20 X versions earlier than 10.1.0.135(C00E135R2P8), HUAWEI Mate 20 RS versions earlier than 10.1.0.160(C786E160R3P8), and Honor Magic2 smartphones versions earlier than 10.1.0.160(C00E160R2P11) have a path traversal vulnerability

Published Jul 17, 2020

2.3

LOW

CVSS 3.1

EPSS 0.23%

Description

HUAWEI Mate 20 versions earlier than 10.1.0.160(C00E160R3P8), HUAWEI Mate 20 X versions earlier than 10.1.0.135(C00E135R2P8), HUAWEI Mate 20 RS versions earlier than 10.1.0.160(C786E160R3P8), and Honor Magic2 smartphones versions earlier than 10.1.0.160(C00E160R2P11) have a path traversal vulnerability. The system does not sufficiently validate certain pathname from certain process, successful exploit could allow the attacker write files to a crafted path.

Affected products

Vendor n/a Product HUAWEI Mate 20 Default
n/a
- Version
  Versions earlier than 10.1.0.160(C00E160R3P8)
  Status
  affected
  Constraints
  -
Vendor n/a Product HUAWEI Mate 20 RS Default
n/a
- Version
  Versions earlier than 10.1.0.160(C786E160R3P8)
  Status
  affected
  Constraints
  -
Vendor n/a Product HUAWEI Mate 20 X Default
n/a
- Version
  Versions earlier than 10.1.0.135(C00E135R2P8)
  Status
  affected
  Constraints
  -
Vendor n/a Product Honor Magic2 Default
n/a
- Version
  Versions earlier than 10.1.0.160(C00E160R2P11)
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

n/a

HUAWEI Mate 20

n/a

Version	Status	Constraints
Versions earlier than 10.1.0.160(C00E160R3P8)	affected	-

n/a

HUAWEI Mate 20 RS

n/a

Version	Status	Constraints
Versions earlier than 10.1.0.160(C786E160R3P8)	affected	-

n/a

HUAWEI Mate 20 X

n/a

Version	Status	Constraints
Versions earlier than 10.1.0.135(C00E135R2P8)	affected	-

n/a

Honor Magic2

n/a

Version	Status	Constraints
Versions earlier than 10.1.0.160(C00E160R2P11)	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-22

Path Traversal

References (1)

https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200715-07-smartphone-en
x_refsource_CONFIRMVendor Advisory

Link	Providers	Tags
https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200715-07-smartphone-en		x_refsource_CONFIRMVendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner huawei

Published Jul 17, 2020

Updated Aug 4, 2024

Reserved Feb 18, 2020

Link CVE-2020-9252

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2020-9252

Red Hat

Severity n/a

Public date n/a

Links CVE-2020-9252