PT-2020-20540 · Huawei+1 · Huawei P30+6

Published

2020-08-11

·

Updated

2021-07-21

·

CVE-2020-9244

CVSS v3.1

6.8

Medium

VectorAV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions HUAWEI Mate 20 versions earlier than 10.1.0.160(C00E160R3P8) HUAWEI Mate 20 Pro versions earlier than 10.1.0.270(C431E7R1P5) HUAWEI Mate 20 Pro versions earlier than 10.1.0.270(C635E3R1P5) HUAWEI Mate 20 Pro versions earlier than 10.1.0.273(C636E7R2P4) HUAWEI Mate 20 X versions earlier than 10.1.0.160(C00E160R2P8) HUAWEI P30 versions earlier than 10.1.0.160(C00E160R2P11) HUAWEI P30 Pro versions earlier than 10.1.0.160(C00E160R2P8) HUAWEI Mate 20 RS versions earlier than 10.1.0.160(C786E160R3P8) Honor Magic2 versions earlier than 10.0.0.187(C00E61R2P11) Honor 20 versions earlier than 10.0.0.175(C00E58R4P11) Honor 20 Pro versions earlier than 10.0.0.194(C00E62R8P12) Honor V20 versions earlier than 10.0.0.188(C00E62R2P11)
Description The system has an improper authentication issue due to not properly signing certain encrypted files. An attacker who gains the key used to encrypt the file could successfully exploit this, potentially causing certain files to be forged.
Recommendations For HUAWEI Mate 20 versions earlier than 10.1.0.160(C00E160R3P8), update to version 10.1.0.160(C00E160R3P8) or later. For HUAWEI Mate 20 Pro versions earlier than 10.1.0.270(C431E7R1P5), update to version 10.1.0.270(C431E7R1P5) or later. For HUAWEI Mate 20 Pro versions earlier than 10.1.0.270(C635E3R1P5), update to version 10.1.0.270(C635E3R1P5) or later. For HUAWEI Mate 20 Pro versions earlier than 10.1.0.273(C636E7R2P4), update to version 10.1.0.273(C636E7R2P4) or later. For HUAWEI Mate 20 X versions earlier than 10.1.0.160(C00E160R2P8), update to version 10.1.0.160(C00E160R2P8) or later. For HUAWEI P30 versions earlier than 10.1.0.160(C00E160R2P11), update to version 10.1.0.160(C00E160R2P11) or later. For HUAWEI P30 Pro versions earlier than 10.1.0.160(C00E160R2P8), update to version 10.1.0.160(C00E160R2P8) or later. For HUAWEI Mate 20 RS versions earlier than 10.1.0.160(C786E160R3P8), update to version 10.1.0.160(C786E160R3P8) or later. For Honor Magic2 versions earlier than 10.0.0.187(C00E61R2P11), update to version 10.0.0.187(C00E61R2P11) or later. For Honor 20 versions earlier than 10.0.0.175(C00E58R4P11), update to version 10.0.0.175(C00E58R4P11) or later. For Honor 20 Pro versions earlier than 10.0.0.194(C00E62R8P12), update to version 10.0.0.194(C00E62R8P12) or later. For Honor V20 versions earlier than 10.0.0.188(C00E62R2P11), update to version 10.0.0.188(C00E62R2P11) or later.

Fix

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Related Identifiers

CVE-2020-9244

Affected Products

Huawei Mate 20
Huawei Mate 20 Pro
Huawei P30
Huawei P30 Pro
Honor V20
Honor 20 Pro
Honor Magic2