CVE-2020-9080highCWE-269

CVE-2020-9080: high-severity vulnerability in HUAWEI Mate 20 Pro

Published

Follow this CVE+ Monitor HUAWEI Mate 20 Pro+ Monitor HUAWEI nova

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 7.8epss 0.1%
There is an improper privilege management vulnerability in Huawei smart phone product. A local, authenticated attacker could craft a specific input to exploit this vulnerability. Successful exploitation may lead to local privilege escalation. (Vulnerability ID: HWPSIRT-2020-05272) This vulnerability has been assigned a Common Vulnerabilities and Exposures (CVE) ID: CVE-2020-9080.
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Affected products
Huawei · HUAWEI Mate 20 ProHuawei · HUAWEI Mate 20 Pro (UD)Huawei · HUAWEI nova 5i
Related CVEs — HUAWEI Mate 20 Pro

In the same product, most dangerous first.

CVE-2020-9247—CVE-2020-9247EPSS 0.8%CVE-2019-5303—CVE-2019-5303EPSS 0.3%CVE-2019-5302—CVE-2019-5302EPSS 0.3%CVE-2020-1786—CVE-2020-1786EPSS 0.2%CVE-2020-9250LOWCVE-2020-9250EPSS 0.1%