PT-2020-15066 · Huawei · Huawei Mate 20+1

Published 2020-03-20 · Updated 2020-03-24 · CVE-2020-1794

Positive Technologies (AI Summary)

CVSS v3.1

4.6

Medium

Base vector

AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions HUAWEI Mate 20 versions earlier than 10.0.0.188(C00E74R3P8) HUAWEI Mate 30 Pro versions earlier than 10.0.0.203(C00E202R7P2)

Description There is an improper authentication issue in the applock of several smartphones. The applock does not perform sufficient authentication in certain scenarios. A successful exploit could allow an attacker to gain access to certain data of the locked application.

Recommendations For HUAWEI Mate 20 versions earlier than 10.0.0.188(C00E74R3P8), update to version 10.0.0.188(C00E74R3P8) or later. For HUAWEI Mate 30 Pro versions earlier than 10.0.0.203(C00E202R7P2), update to version 10.0.0.203(C00E202R7P2) or later.

Fix

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2020-1794

Affected Products

Huawei Mate 20

Huawei Mate 30 Pro

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2020-1794 · Security Note
• https://osv.dev/vulnerability/CVE-2020-1794 · Vendor Advisory
• https://huawei.com/en/psirt/security-advisories/huawei-sa-20200318-02-smartphone-en · Vendor Advisory
• https://t.me/cvenotify/1948 · Telegram Post