Vulnerability · Published Apr 10, 2020 · Assigned by huawei

CVE-2020-1801

Medium 5.5

In plain English

A medium-severity security flaw in Mate 30 Pro;Mate 30. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.6% (higher than 48% of all known vulnerabilities).

Severity (CVSS NVD)5.5Medium
Exploit odds (30 days)0.6%top 51.6% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known

Official description

There is an improper authentication vulnerability in several smartphones. Certain function interface in the system does not sufficiently validate the caller's identity in certain share scenario, successful exploit could cause information disclosure. Affected product versions include:Mate 30 Pro versions Versions earlier than 10.0.0.205(C00E202R7P2);Mate 30 versions Versions earlier than 10.0.0.205(C00E201R7P2).

Affected products (as reported)

VendorProductVersions
n/a Mate 30 Pro;Mate 30 Versions earlier than 10.0.0.205(C00E202R7P2)Versions earlier than 10.0.0.205(C00E201R7P2)

References