PT-2020-15063 · Huawei · Huawei Mate 20

Ding Yicong · Published 2020-02-18 · Updated 2021-07-21 · CVE-2020-1791

Positive Technologies (AI Summary)

CVSS v3.1

2.4

Low

Base vector

AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions HUAWEI Mate 20 smartphones versions prior to 10.0.0.185(C00E74R3P8)

Description The system has a logic judging error under certain scenarios, which could allow an attacker to switch to the third desktop after a series of operations in ADB mode. This is due to an improper authorization issue.

Recommendations For versions prior to 10.0.0.185(C00E74R3P8), update to version 10.0.0.185(C00E74R3P8) or later to resolve the issue. As a temporary workaround, consider restricting ADB mode access to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2020-1791

Affected Products

Huawei Mate 20

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2020-1791 · Security Note
• http://huawei.com/en/psirt/security-advisories/huawei-sa-20200205-01-smartphone-en · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-1791 · Vendor Advisory