// For flags

CVE-2020-1798

 

Severity Score

4.6
*CVSS v3.1

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

0
*Multiple Sources

Exploited in Wild

-
*KEV

Decision

-
*SSVC
Descriptions

HUAWEI P30 smartphones with versions earlier than 10.1.0.135(C00E135R2P11) have an improper authentication vulnerability. A logic error occurs when handling NFC work, an attacker should establish a NFC connection to the target phone, and then do a series of operations on the target phone. Successful exploit could allow a guest user do certain operation which is beyond the guest user's privilege.

Los teléfonos inteligentes HUAWEI P30 con versiones anteriores a 10.1.0.135(C00E135R2P11), presentan una vulnerabilidad de autenticación inapropiada. Se produce un error lógico cuando se maneja el trabajo de NFC, un atacante debe establecer una conexión NFC con el teléfono objetivo, y luego hacer una serie de operaciones en el mismo. Una explotación con éxito podría permitir a un usuario invitado hacer determinada operación que se encuentran más allá del privilegio del usuario invitado.

*Credits: N/A
CVSS Scores
Attack Vector
Physical
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
High
Availability
None
Attack Vector
Local
Attack Complexity
Low
Authentication
None
Confidentiality
None
Integrity
Partial
Availability
None
* Common Vulnerability Scoring System
SSVC
  • Decision:-
Exploitation
-
Automatable
-
Tech. Impact
-
* Organization's Worst-case Scenario
Timeline
  • 2019-11-29 CVE Reserved
  • 2020-05-29 CVE Published
  • 2023-03-08 EPSS Updated
  • 2024-08-04 CVE Updated
  • ---------- Exploited in Wild
  • ---------- KEV Due Date
  • ---------- First Exploit
CWE
  • CWE-287: Improper Authentication
CAPEC
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
Huawei
Search vendor "Huawei"
 P30 Firmware
Search vendor "Huawei" for product "P30 Firmware"
 < 10.1.0.135\(c00e135r2p11\)
Search vendor "Huawei" for product "P30 Firmware" and version " < 10.1.0.135\(c00e135r2p11\)"
-
Affected
in Huawei
Search vendor "Huawei"
 P30
Search vendor "Huawei" for product "P30"
--
Safe