Vulnerability · Published Dec 29, 2020 · Assigned by huawei

CVE-2020-9223

High 7.5

In plain English

A high-severity security flaw in HONOR 20 PRO. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.9% (higher than 59% of all known vulnerabilities).

Severity (CVSS NVD)7.5High
Exploit odds (30 days)0.9%top 40.5% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known

Official description

There is a denial of service vulnerability in some Huawei smartphones. Due to the improper processing of received abnormal messages, remote attackers may exploit this vulnerability to cause a denial of service (DoS) on the specific module.

Affected products (as reported)

VendorProductVersions
n/a HONOR 20 PRO Versions earlier than 10.1.0.230(C432E9R5P1)Versions earlier than 10.1.0.231(C10E3R3P2)Versions earlier than 10.1.0.231(C185E3R5P1)Versions earlier than 10.1.0.231(C636E3R3P1)
n/a Princeton-AL10D Versions earlier than 10.1.0.168(C00E166R4P11)
n/a Yale-L21A Versions earlier than 10.1.0.230(C432E9R5P1)Versions earlier than 10.1.0.231(C10E3R3P2)Versions earlier than 10.1.0.231(C185E2R2P1)Versions earlier than 10.1.0.231(C636E3R3P1)
n/a Yale-L61A Versions earlier than 10.1.0.225(C432E3R1P2)Versions earlier than 10.1.0.226(C10E3R1P1)

References