Log in Start free

Vulnerability · Published Jul 17, 2020 · Assigned by huawei

CVE-2020-9252

Low 2.3

In plain English

A low-severity security flaw in Honor Magic2. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 13% of all known vulnerabilities).

Severity (CVSS NVD)2.3Low
Exploit odds (30 days)0.2%top 86.7% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known

Official description

HUAWEI Mate 20 versions earlier than 10.1.0.160(C00E160R3P8), HUAWEI Mate 20 X versions earlier than 10.1.0.135(C00E135R2P8), HUAWEI Mate 20 RS versions earlier than 10.1.0.160(C786E160R3P8), and Honor Magic2 smartphones versions earlier than 10.1.0.160(C00E160R2P11) have a path traversal vulnerability. The system does not sufficiently validate certain pathname from certain process, successful exploit could allow the attacker write files to a crafted path.

Affected products (as reported)

VendorProductVersions
n/a HUAWEI Mate 20 Versions earlier than 10.1.0.160(C00E160R3P8)
n/a HUAWEI Mate 20 X Versions earlier than 10.1.0.135(C00E135R2P8)
n/a HUAWEI Mate 20 RS Versions earlier than 10.1.0.160(C786E160R3P8)
n/a Honor Magic2 Versions earlier than 10.1.0.160(C00E160R2P11)

References