Vulnerability · Published Apr 20, 2020 · Assigned by huawei

CVE-2020-1803

Medium 5.3

In plain English

A medium-severity security flaw in Honor V20 from Huawei. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 25% of all known vulnerabilities).

Severity (CVSS NVD)5.3Medium

Exploit odds (30 days)0.3%top 74.6% of all CVEs

Exploited in the wildNo reportsnot in CISA KEV

Attack toolingNoneno public tooling known

Official description

Huawei smartphones Honor V20 with versions earlier than 10.0.0.179(C636E3R4P3),versions earlier than 10.0.0.180(C185E3R3P3),versions earlier than 10.0.0.180(C432E10R3P4) have an information disclosure vulnerability. The device does not sufficiently validate the identity of smart wearable device in certain specific scenario, the attacker need to gain certain information in the victim's smartphone to launch the attack, successful exploit could cause information disclosure.

Affected products (as reported)

Vendor	Product	Versions
Huawei	Honor V20	Versions earlier than 10.0.0.179(C636E3R4P3)Versions earlier than 10.0.0.180(C185E3R3P3)Versions earlier than 10.0.0.180(C432E10R3P4)

References

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200415-02-smartphone-en x_refsource_CONFIRM
https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200415-02-smartphone-en x_refsource_CONFIRM