PT-2020-15072 · Huawei · P30

Published 2020-03-26 · Updated 2021-07-21 · CVE-2020-1800

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions HUAWEI smartphones P30 versions earlier than 10.0.0.185(C00E85R1P11)

Description The issue is related to improper access control, where the software fails to correctly restrict access to a function interface from unauthorized actors. An attacker can trick a user into installing a crafted application, potentially allowing the attacker to perform certain unauthenticated operations.

Recommendations For versions earlier than 10.0.0.185(C00E85R1P11), update to version 10.0.0.185(C00E85R1P11) or later to resolve the issue. As a temporary workaround, consider restricting the installation of applications from untrusted sources to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2020-1800

Affected Products

P30

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2020-1800 · Security Note
• https://huawei.com/en/psirt/security-advisories/huawei-sa-20200325-02-smartphone-en · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-1800 · Vendor Advisory
• https://t.me/cvenotify/2194 · Telegram Post