PT-2020-15073 · Huawei · Mate 30 Pro+1

Published 2020-04-10 · Updated 2021-07-21 · CVE-2020-1801

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Mate 30 Pro versions earlier than 10.0.0.205(C00E202R7P2) Mate 30 versions earlier than 10.0.0.205(C00E201R7P2)

Description The issue is related to improper authentication in certain smartphones. A function interface in the system does not sufficiently validate the caller's identity in certain share scenarios, which could lead to information disclosure if successfully exploited.

Recommendations For Mate 30 Pro versions earlier than 10.0.0.205(C00E202R7P2), update to version 10.0.0.205(C00E202R7P2) or later. For Mate 30 versions earlier than 10.0.0.205(C00E201R7P2), update to version 10.0.0.205(C00E201R7P2) or later.

Fix

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2020-1801

Affected Products

Mate 30

Mate 30 Pro

References · 4

• https://huawei.com/en/psirt/security-advisories/huawei-sa-20200408-01-smartphone-en · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-1801 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-1801 · Security Note
• https://t.me/cvenotify/2640 · Telegram Post