PT-2020-15103 · Huawei · Honor Magic2

Published 2020-01-09 · Updated 2021-07-21 · CVE-2020-1826

Positive Technologies (AI Summary)

CVSS v3.1

4.4

Medium

Base vector

AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Huawei Honor Magic2 mobile phones versions prior to 10.0.0.175(C00E59R2P11)

Description The issue is related to a module using a weak encryption tool, which can lead to an information leak. An attacker with root permission may exploit this to obtain certain information.

Recommendations For versions prior to 10.0.0.175(C00E59R2P11), update to version 10.0.0.175(C00E59R2P11) or later to resolve the issue.

Fix

Use of a Broken Cryptographic Algorithm

Weakness Enumeration

CWE-327

Related Identifiers

CVE-2020-1826

Affected Products

Honor Magic2

References · 3

• https://osv.dev/vulnerability/CVE-2020-1826 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-1826 · Security Note
• https://huawei.com/en/psirt/security-advisories/huawei-sa-20200108-01-phone-en · Vendor Advisory