Vulnerability · Published Feb 18, 2020 · Assigned by huawei

CVE-2020-1872

Medium 4.6

In plain English

A medium-severity security flaw in HUAWEI P10 Plus from Huawei. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 12% of all known vulnerabilities).

Severity (CVSS NVD)4.6Medium
Exploit odds (30 days)0.2%top 88.2% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known

Official description

Huawei smart phones P10 Plus with versions earlier than 9.1.0.201(C01E75R1P12T8), earlier than 9.1.0.252(C185E2R1P9T8), earlier than 9.1.0.252(C432E4R1P9T8), and earlier than 9.1.0.255(C576E6R1P8T8) have a digital balance bypass vulnerability. When re-configuring the mobile phone at the digital balance mode, an attacker can perform some operations to bypass the startup wizard, and then open some switch. As a result, the digital balance function is bypassed.

Affected products (as reported)

VendorProductVersions
Huawei HUAWEI P10 Plus earlier than 9.1.0.201(C01E75R1P12T8)earlier than 9.1.0.252(C185E2R1P9T8)earlier than 9.1.0.252(C432E4R1P9T8)earlier than 9.1.0.255(C576E6R1P8T8)

References