PT-2024-10863 · Huawei · Huawei Smartphone

Published 2024-12-27 · Updated 2025-01-13 · CVE-2020-9089

Positive Technologies (AI Summary)

CVSS v3.1

3.3

Low

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Huawei smartphones (affected versions not specified)

Description There is an information vulnerability in Huawei smartphones. A function in a module can be called without verifying the caller's access. Attackers with user access can exploit this vulnerability to obtain some information, leading to an information leak.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2020-9089

Affected Products

Huawei Smartphone

References · 5

• https://huawei.com/en/psirt/security-advisories/huawei-sa-20200826-09-smartphone-en · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-9089 · Security Note
• https://osv.dev/vulnerability/CVE-2020-9089 · Vendor Advisory
• https://t.me/cvedetector/13730 · Telegram Post
• https://twitter.com/CVEnew/status/1872580824316477908 · Twitter Post