PT-2020-20522 · Huawei · Te Mobile

Tony Y.K. Yu · Published 2020-12-24 · Updated 2020-12-28 · CVE-2020-9202

Positive Technologies (AI Summary)

CVSS v3.1

4.4

Medium

Base vector

AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions TE Mobile software versions V600R006C10, V600R006C10SPC100

Description The issue is related to improper storage of certain information in specific scenarios, allowing an attacker to gain information from the victim's device and potentially launch an attack. Successful exploitation could result in information disclosure.

Recommendations For TE Mobile software versions V600R006C10, V600R006C10SPC100, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Insecure Storage of Sensitive Information

Weakness Enumeration

CWE-922

Related Identifiers

CVE-2020-9202

Affected Products

Te Mobile

References · 5

• https://osv.dev/vulnerability/CVE-2020-9202 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-9202 · Security Note
• https://huawei.com/en/psirt/security-advisories/huawei-sa-20201209-01-informationleak-en · Vendor Advisory
• https://t.me/cvenotify/7708 · Telegram Post
• https://t.me/cvenotify/7834 · Telegram Post