Vulnerability · Published Mar 26, 2020 · Assigned by huawei
CVE-2020-9066
High 7.8
In plain English
A high-severity security flaw in OxfordP-AN10B. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.6% (higher than 47% of all known vulnerabilities).
Severity (CVSS NVD)7.8High
Exploit odds (30 days)0.6%top 52.8% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
Huawei smartphones OxfordP-AN10B with versions earlier than 10.0.1.169(C00E166R4P1) have an improper authentication vulnerability. The Application doesn't perform proper authentication when user performs certain operations. An attacker can trick user into installing a malicious plug-in to exploit this vulnerability. Successful exploit could allow the attacker to bypass the authentication to perform unauthorized operations.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| n/a | OxfordP-AN10B | Versions earlier than 10.0.1.169(C00E166R4P1) |