PT-2020-5935 · Huawei · Huawei P30 Pro+1

Published 2020-06-18 · Updated 2020-06-20 · CVE-2020-1834

Positive Technologies (AI Summary)

CVSS v2.0

4.9

Medium

Base vector

AV:L/AC:L/Au:N/C:N/I:C/A:N

Name of the Vulnerable Software and Affected Versions: HUAWEI P30 versions prior to 10.1.0.135(C00E135R2P11) HUAWEI P30 Pro versions prior to 10.1.0.135(C00E135R2P8)

Description: The issue is related to insufficient integrity checking in the software of certain mobile phones. This could allow an attacker to load arbitrary files, potentially including crafted software packages, onto the device by exploiting the lack of proper checks on software package integrity.

Recommendations: For HUAWEI P30 versions prior to 10.1.0.135(C00E135R2P11), update to version 10.1.0.135(C00E135R2P11) or later. For HUAWEI P30 Pro versions prior to 10.1.0.135(C00E135R2P8), update to version 10.1.0.135(C00E135R2P8) or later.

Fix

Weakness Enumeration

CWE-354

Related Identifiers

BDU:2021-02050

CVE-2020-1834

Affected Products

Huawei P30

Huawei P30 Pro

References · 4

• https://huawei.com/en/psirt/security-advisories/huawei-sa-20200617-01-smartphone-en · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-1834 · Security Note
• https://osv.dev/vulnerability/CVE-2020-1834 · Vendor Advisory
• https://bdu.fstec.ru/vul/2021-02050 · Security Note