PT-2020-15068 · Huawei · Huawei Mate 20+1

Ding Yicong · Published 2020-03-20 · Updated 2020-03-24 · CVE-2020-1796

Positive Technologies (AI Summary)

CVSS v3.1

6.6

Medium

Base vector

AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions HUAWEI Mate 20 versions earlier than 10.0.0.188(C00E74R3P8) HUAWEI Mate 30 Pro versions earlier than 10.0.0.203(C00E202R7P2)

Description The issue is related to improper authorization in the software of several smartphones. It incorrectly performs authorization for certain users, which could allow a low-privilege user to perform operations they are not supposed to do.

Recommendations For HUAWEI Mate 20 versions earlier than 10.0.0.188(C00E74R3P8), update to version 10.0.0.188(C00E74R3P8) or later. For HUAWEI Mate 30 Pro versions earlier than 10.0.0.203(C00E202R7P2), update to version 10.0.0.203(C00E202R7P2) or later.

Fix

Incorrect Authorization

Weakness Enumeration

CWE-863

Related Identifiers

CVE-2020-1796

Affected Products

Huawei Mate 20

Huawei Mate 30 Pro

References · 4

• https://huawei.com/en/psirt/security-advisories/huawei-sa-20200318-05-smartphone-en · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-1796 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-1796 · Security Note
• https://t.me/cvenotify/1950 · Telegram Post