PT-2020-20549 · Huawei · Honor V10

Published 2020-07-17 · Updated 2020-07-22 · CVE-2020-9255

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Huawei Honor 10 versions prior to 10.0.0.178(C00E178R1P4)

Description The issue is related to a denial of service condition. A certain service in the system does not sufficiently validate a certain parameter which is received. An attacker could trick the user into installing a malicious application. Successful exploitation could cause a denial of service condition.

Recommendations For versions prior to 10.0.0.178(C00E178R1P4), update to version 10.0.0.178(C00E178R1P4) or later to resolve the issue. As a temporary workaround, consider avoiding the installation of applications from untrusted sources to minimize the risk of exploitation.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2020-9255

Affected Products

Honor V10

References · 3

• https://osv.dev/vulnerability/CVE-2020-9255 · Vendor Advisory
• https://huawei.com/en/psirt/security-advisories/huawei-sa-20200715-06-smartphone-en · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-9255 · Security Note