Page 2 of 22 results (0.003 seconds)

CVSS: 3.6EPSS: 0%CPEs: 2EXPL: 0

27 Apr 2020 — HUAWEI Mate 20 smartphones with versions earlier than 10.0.0.188(C00E74R3P8) have an improper authorization vulnerability. The software does not properly restrict certain user's modification of certain configuration file, successful exploit could allow the attacker to bypass app lock after a series of operation in ADB mode. Los teléfonos inteligentes HUAWEI Mate 20 con versiones anteriores a la versión 10.0.0.188(C00E74R3P8), presentan una vulnerabilidad de autorización inapropiada. El software no restringe... • https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200422-01-smartphone-en •

CVSS: 4.6EPSS: 0%CPEs: 4EXPL: 0

20 Mar 2020 — There is an improper authentication vulnerability in several smartphones. The applock does not perform a sufficient authentication in certain scenarios, successful exploit could allow the attacker to gain certain data of the application which is locked. Affected product versions include:HUAWEI Mate 20 versions Versions earlier than 10.0.0.188(C00E74R3P8);HUAWEI Mate 30 Pro versions Versions earlier than 10.0.0.203(C00E202R7P2). Se presenta una vulnerabilidad de autenticación inapropiada en varios teléfonos ... • https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200318-02-smartphone-en • CWE-287: Improper Authentication •

CVSS: 4.6EPSS: 0%CPEs: 4EXPL: 0

20 Mar 2020 — There is an improper authentication vulnerability in several smartphones. The applock does not perform a sufficient authentication in certain scenarios, successful exploit could allow the attacker to gain certain data of the application which is locked. Affected product versions include:HUAWEI Mate 20 versions Versions earlier than 10.0.0.188(C00E74R3P8);HUAWEI Mate 30 Pro versions Versions earlier than 10.0.0.203(C00E202R7P2). Se presenta una vulnerabilidad de autenticación inapropiada en varios teléfonos ... • https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200318-02-smartphone-en • CWE-287: Improper Authentication •

CVSS: 6.6EPSS: 0%CPEs: 4EXPL: 0

20 Mar 2020 — There is an improper authorization vulnerability in several smartphones. The software incorrectly performs an authorization to certain user, successful exploit could allow a low privilege user to do certain operation which the user are supposed not to do.Affected product versions include:HUAWEI Mate 20 versions Versions earlier than 10.0.0.188(C00E74R3P8);HUAWEI Mate 30 Pro versions Versions earlier than 10.0.0.203(C00E202R7P2). Se presenta una vulnerabilidad de autorización inapropiada en varios teléfonos ... • https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200318-05-smartphone-en • CWE-863: Incorrect Authorization •

CVSS: 2.4EPSS: 0%CPEs: 4EXPL: 0

20 Mar 2020 — There is a logic error vulnerability in several smartphones. The software does not properly restrict certain operation when the Digital Balance function is on. Successful exploit could allow the attacker to bypass the Digital Balance limit after a series of operations.Affected product versions include:HUAWEI Mate 20 versions Versions earlier than 10.0.0.188(C00E74R3P8);HUAWEI Mate 30 Pro versions Versions earlier than 10.0.0.203(C00E202R7P2). Se presenta una vulnerabilidad de error lógico en varios teléfono... • https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200318-04-smartphone-en •

CVSS: 2.4EPSS: 0%CPEs: 2EXPL: 0

18 Feb 2020 — HUAWEI Mate 20 smartphones with versions earlier than 10.0.0.185(C00E74R3P8) have an improper authorization vulnerability. The system has a logic judging error under certain scenario, successful exploit could allow the attacker to switch to third desktop after a series of operation in ADB mode. Los teléfonos inteligentes HUAWEI Mate 20 con versiones anteriores a 10.0.0.185(C00E74R3P8), presentan una vulnerabilidad de autorización inapropiada. El sistema presenta un error de juicio lógico bajo determinado es... • http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200205-01-smartphone-en •

CVSS: 8.8EPSS: 12%CPEs: 46EXPL: 9

13 Feb 2020 — In reassemble_and_dispatch of packet_fragmenter.cc, there is possible out of bounds write due to an incorrect bounds calculation. This could lead to remote code execution over Bluetooth with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-143894715 En la función reassemble_and_dispatch del archivo packet_fragmenter.cc, es posible una escritura fuera de límites debido a un cálculo de... • https://packetstorm.news/files/id/156891 • CWE-682: Incorrect Calculation •

CVSS: 6.0EPSS: 0%CPEs: 2EXPL: 0

21 Jan 2020 — HUAWEI Mate 20 smart phones with versions earlier than 10.0.0.175(C00E70R3P8) have an insufficient authentication vulnerability. A local attacker with high privilege can execute a specific command to exploit this vulnerability. Successful exploitation may cause information leak and compromise the availability of the smart phones.Affected product versions include: HUAWEI Mate 20 versions Versions earlier than 10.0.0.175(C00E70R3P8) Los teléfonos inteligentes HUAWEI Mate 20 con versiones anteriores a 10.0.0.1... • https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200115-01-smartphone-en • CWE-287: Improper Authentication •

CVSS: 5.5EPSS: 0%CPEs: 8EXPL: 0

29 Nov 2019 — P30, P30 Pro, Mate 20 smartphones with software of versions earlier than ELLE-AL00B 9.1.0.193(C00E190R2P1), versions earlier than VOGUE-AL00A 9.1.0.193(C00E190R2P1), versions earlier than Hima-AL00B 9.1.0.135(C00E133R2P1) and HiSuite with versions earlier than HiSuite 9.1.0.305 have a version downgrade vulnerability. The device and HiSuite software do not validate the upgrade package sufficiently, so that the system of smartphone can be downgraded to an older version. Los teléfonos inteligentes P30, P30 Pro... • https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190904-01-smartphone-en • CWE-346: Origin Validation Error •

CVSS: 7.8EPSS: 0%CPEs: 6EXPL: 0

29 Nov 2019 — P30, Mate 20, P30 Pro smartphones with software of versions earlier than ELLE-AL00B 9.1.0.193(C00E190R1P21), versions earlier than Hima-AL00B 9.1.0.135(C00E200R2P1), versions earlier than VOGUE-AL00A 9.1.0.193(C00E190R1P12) have a buffer overflow vulnerability on several , the system does not properly validate certain length parameter which an application transports to kernel. An attacker tricks the user to install a malicious application, successful exploit could cause malicious code execution. Los teléfon... • https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190821-02-smartphone-en • CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') •