PT-2020-15130 · Huawei · Huawei P10 Plus

Published 2020-02-18 · Updated 2021-07-21 · CVE-2020-1872

Positive Technologies (AI Summary)

CVSS v3.1

4.6

Medium

Base vector

AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Huawei P10 Plus versions earlier than 9.1.0.201(C01E75R1P12T8) Huawei P10 Plus versions earlier than 9.1.0.252(C185E2R1P9T8) Huawei P10 Plus versions earlier than 9.1.0.252(C432E4R1P9T8) Huawei P10 Plus versions earlier than 9.1.0.255(C576E6R1P8T8)

Description The issue allows an attacker to bypass the digital balance function on Huawei smart phones. This can be achieved by performing specific operations when re-configuring the mobile phone in digital balance mode, enabling the attacker to bypass the startup wizard and open certain switches.

Recommendations For versions earlier than 9.1.0.201(C01E75R1P12T8), update to version 9.1.0.201(C01E75R1P12T8) or later. For versions earlier than 9.1.0.252(C185E2R1P9T8), update to version 9.1.0.252(C185E2R1P9T8) or later. For versions earlier than 9.1.0.252(C432E4R1P9T8), update to version 9.1.0.252(C432E4R1P9T8) or later. For versions earlier than 9.1.0.255(C576E6R1P8T8), update to version 9.1.0.255(C576E6R1P8T8) or later.

Fix

Related Identifiers

CVE-2020-1872

Affected Products

Huawei P10 Plus

References · 3

• https://osv.dev/vulnerability/CVE-2020-1872 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-1872 · Security Note
• https://huawei.com/en/psirt/security-advisories/huawei-sa-20200122-01-digitalbalance-en · Vendor Advisory