PT-2020-15056 · Huawei · Huawei Nova 4+2

Wei Junyi · Published 2020-01-03 · Updated 2021-07-21 · CVE-2020-1785

Positive Technologies (AI Summary)

CVSS v2.0

7.1

High

Base vector

AV:N/AC:M/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Huawei Mate 10 Pro version (affected versions not specified) Honor V10 version (affected versions not specified) Honor 10 version (affected versions not specified) Huawei Nova 4 version (affected versions not specified)

Description The issue is related to a denial of service vulnerability. It occurs because the system does not properly check the status of certain modules during certain operations. An attacker could exploit this by tricking the user into installing a malicious application. If the exploit is successful, it could cause the smartphone to reboot.

Recommendations For Huawei Mate 10 Pro, update the system to a version that includes the fix for this issue. For Honor V10, update the system to a version that includes the fix for this issue. For Honor 10, update the system to a version that includes the fix for this issue. For Huawei Nova 4, update the system to a version that includes the fix for this issue. As a temporary workaround, consider restricting the installation of applications from untrusted sources to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2020-1785

Affected Products

Honor V10

Huawei Mate 10 Pro

Huawei Nova 4

References · 3

• https://osv.dev/vulnerability/CVE-2020-1785 · Vendor Advisory
• https://huawei.com/en/psirt/security-advisories/huawei-sa-20200102-03-smartphone-en · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-1785 · Security Note