PT-2020-5963 · Huawei · Huawei Mate 30

Xu Jingyuan · Published 2020-06-17 · Updated 2021-07-21 · CVE-2020-1835

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions HUAWEI Mate 30 versions prior to 10.1.0.126(C00E125R5P3)

Description The issue is related to a logic judgment error when handling Bluetooth connections, allowing an attacker to craft an attack as an authenticated Bluetooth peer. This could lead to information disclosure. The vulnerability is associated with errors in security mechanisms, which could allow a remote attacker to gain unauthorized access to protected information.

Recommendations For HUAWEI Mate 30 versions prior to 10.1.0.126(C00E125R5P3), update to version 10.1.0.126(C00E125R5P3) or later to resolve the issue. As a temporary workaround, consider restricting Bluetooth connections to trusted devices until the update is applied.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

BDU:2021-02139

CVE-2020-1835

Affected Products

Huawei Mate 30

References · 4

• https://huawei.com/en/psirt/security-advisories/huawei-sa-20200617-02-smartphone-en · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-1835 · Security Note
• https://osv.dev/vulnerability/CVE-2020-1835 · Vendor Advisory
• https://bdu.fstec.ru/vul/2021-02139 · Security Note