CVE-2020-9119
There is a privilege escalation vulnerability on some Huawei smart phones due to design defects.
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
Summary
There is a privilege escalation vulnerability on some Huawei smart phones due to design defects. The attacker needs to physically contact the mobile phone and obtain higher privileges, and execute relevant commands, resulting in the user's privilege promotion.
Timeline
- CVE published
- Record last updated
Affected versions
- n/a HUAWEI Mate 10;HUAWEI Mate 30;HUAWEI Mate 30 Pro;HUAWEI P40;HUAWEI P40 Pro
Versions earlier than 10.0.0.189(C185E6R1P3), Versions earlier than 10.1.0.156(C00E155R7P2), Versions earlier than 10.1.0.156(C00E156R7P2), Versions earlier than 10.1.0.150(SP1C00E150R4P1)