CVE-2020-9247
Severity Score
7.8
*CVSS v3.1
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
There is a buffer overflow vulnerability in several Huawei products. The system does not sufficiently validate certain configuration parameter which is passed from user that would cause buffer overflow. The attacker should trick the user into installing and running a malicious application with a high privilege, successful exploit may cause code execution. Affected product include Huawei HONOR 20 PRO, Mate 20, Mate 20 Pro, Mate 20 X, P30, P30 Pro, Hima-L29C, Laya-AL00EP, Princeton-AL10B, Tony-AL00B, Yale-L61A, Yale-TL00B and YaleP-AL10B.
Se presenta una vulnerabilidad de desbordamiento del búfer en varios productos de Huawei. El sistema no valida suficientemente ciertos parámetros de configuración que son pasados desde usuario y que causarían un desbordamiento del búfer. El atacante debería engañar al usuario para que instale y ejecute una aplicación maliciosa con un alto privilegio; una explotación con éxito puede provocar una ejecución de código. Los productos afectados incluyen Huawei HONOR 20 PRO, Mate 20, Mate 20 Pro, Mate 20 X, P30, P30 Pro, Hima-L29C, Laya-AL00EP, Princeton-AL10B, Tony-AL00B, Yale-L61A, Yale-TL00B y YaleP- AL10B
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2020-02-18 CVE Reserved
- 2020-12-07 CVE Published
- 2023-11-13 EPSS Updated
- 2024-08-04 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
CAPEC
References (1)
| URL | Tag | Source |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200729-03-smartphone-en | 2020-12-08 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Huawei Search vendor "Huawei" | Honor 20 Pro Firmware Search vendor "Huawei" for product "Honor 20 Pro Firmware" | < 10.1.0.230\(c432e9r5p1\) Search vendor "Huawei" for product "Honor 20 Pro Firmware" and version " < 10.1.0.230\(c432e9r5p1\)" | - |
Affected
| in | Huawei Search vendor "Huawei" | Honor 20 Pro Search vendor "Huawei" for product "Honor 20 Pro" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Mate 20 Firmware Search vendor "Huawei" for product "Mate 20 Firmware" | < 10.1.0.160\(c00e160r3p8\) Search vendor "Huawei" for product "Mate 20 Firmware" and version " < 10.1.0.160\(c00e160r3p8\)" | - |
Affected
| in | Huawei Search vendor "Huawei" | Mate 20 Search vendor "Huawei" for product "Mate 20" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Mate 20 Pro Firmware Search vendor "Huawei" for product "Mate 20 Pro Firmware" | < 10.1.0.270\(c432e7r1p5\) Search vendor "Huawei" for product "Mate 20 Pro Firmware" and version " < 10.1.0.270\(c432e7r1p5\)" | - |
Affected
| in | Huawei Search vendor "Huawei" | Mate 20 Pro Search vendor "Huawei" for product "Mate 20 Pro" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Mate 20 X Firmware Search vendor "Huawei" for product "Mate 20 X Firmware" | < 10.1.0.160\(c00e160r2p8\) Search vendor "Huawei" for product "Mate 20 X Firmware" and version " < 10.1.0.160\(c00e160r2p8\)" | - |
Affected
| in | Huawei Search vendor "Huawei" | Mate 20 X Search vendor "Huawei" for product "Mate 20 X" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | P30 Firmware Search vendor "Huawei" for product "P30 Firmware" | 9.1.0.272\(c635e4r2p2\) Search vendor "Huawei" for product "P30 Firmware" and version "9.1.0.272\(c635e4r2p2\)" | - |
Affected
| in | Huawei Search vendor "Huawei" | P30 Search vendor "Huawei" for product "P30" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | P30 Pro Firmware Search vendor "Huawei" for product "P30 Pro Firmware" | < 10.1.0.160\(c00e160r2p8\) Search vendor "Huawei" for product "P30 Pro Firmware" and version " < 10.1.0.160\(c00e160r2p8\)" | - |
Affected
| in | Huawei Search vendor "Huawei" | P30 Pro Search vendor "Huawei" for product "P30 Pro" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Hima-l29c Firmware Search vendor "Huawei" for product "Hima-l29c Firmware" | < 10.1.0.273\(c185e5r2p4\) Search vendor "Huawei" for product "Hima-l29c Firmware" and version " < 10.1.0.273\(c185e5r2p4\)" | - |
Affected
| in | Huawei Search vendor "Huawei" | Hima-l29c Search vendor "Huawei" for product "Hima-l29c" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Laya-al00ep Firmware Search vendor "Huawei" for product "Laya-al00ep Firmware" | < 10.1.0.160\(c786e160r3p8\) Search vendor "Huawei" for product "Laya-al00ep Firmware" and version " < 10.1.0.160\(c786e160r3p8\)" | - |
Affected
| in | Huawei Search vendor "Huawei" | Laya-al00ep Search vendor "Huawei" for product "Laya-al00ep" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Princeton-al10b Firmware Search vendor "Huawei" for product "Princeton-al10b Firmware" | < 10.1.0.160\(c00e160r2p11\) Search vendor "Huawei" for product "Princeton-al10b Firmware" and version " < 10.1.0.160\(c00e160r2p11\)" | - |
Affected
| in | Huawei Search vendor "Huawei" | Princeton-al10b Search vendor "Huawei" for product "Princeton-al10b" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Tony-al00b Firmware Search vendor "Huawei" for product "Tony-al00b Firmware" | < 10.1.0.160\(c00e160r2p11\) Search vendor "Huawei" for product "Tony-al00b Firmware" and version " < 10.1.0.160\(c00e160r2p11\)" | - |
Affected
| in | Huawei Search vendor "Huawei" | Tony-al00b Search vendor "Huawei" for product "Tony-al00b" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Yale-l61a Firmware Search vendor "Huawei" for product "Yale-l61a Firmware" | < 10.1.0.225\(c432e3r1p2\) Search vendor "Huawei" for product "Yale-l61a Firmware" and version " < 10.1.0.225\(c432e3r1p2\)" | - |
Affected
| in | Huawei Search vendor "Huawei" | Yale-l61a Search vendor "Huawei" for product "Yale-l61a" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Yale-tl00b Firmware Search vendor "Huawei" for product "Yale-tl00b Firmware" | < 10.1.0.160\(c01e160r8p12\) Search vendor "Huawei" for product "Yale-tl00b Firmware" and version " < 10.1.0.160\(c01e160r8p12\)" | - |
Affected
| in | Huawei Search vendor "Huawei" | Yale-tl00b Search vendor "Huawei" for product "Yale-tl00b" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Yalep-al10b Firmware Search vendor "Huawei" for product "Yalep-al10b Firmware" | < 10.1.0.160\(c00e160r8p12\) Search vendor "Huawei" for product "Yalep-al10b Firmware" and version " < 10.1.0.160\(c00e160r8p12\)" | - |
Affected
| in | Huawei Search vendor "Huawei" | Yalep-al10b Search vendor "Huawei" for product "Yalep-al10b" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Honor 20 Pro Firmware Search vendor "Huawei" for product "Honor 20 Pro Firmware" | < 10.1.0.231\(c10e3r3p2\) Search vendor "Huawei" for product "Honor 20 Pro Firmware" and version " < 10.1.0.231\(c10e3r3p2\)" | - |
Affected
| in | Huawei Search vendor "Huawei" | Honor 20 Pro Search vendor "Huawei" for product "Honor 20 Pro" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Mate 20 Pro Firmware Search vendor "Huawei" for product "Mate 20 Pro Firmware" | < 10.1.0.270\(c635e3r1p5\) Search vendor "Huawei" for product "Mate 20 Pro Firmware" and version " < 10.1.0.270\(c635e3r1p5\)" | - |
Affected
| in | Huawei Search vendor "Huawei" | Mate 20 Pro Search vendor "Huawei" for product "Mate 20 Pro" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Mate 20 Pro Firmware Search vendor "Huawei" for product "Mate 20 Pro Firmware" | < 10.1.0.273\(c185e7r2p4\) Search vendor "Huawei" for product "Mate 20 Pro Firmware" and version " < 10.1.0.273\(c185e7r2p4\)" | - |
Affected
| in | Huawei Search vendor "Huawei" | Mate 20 Pro Search vendor "Huawei" for product "Mate 20 Pro" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Mate 20 Pro Firmware Search vendor "Huawei" for product "Mate 20 Pro Firmware" | < 10.1.0.273\(c636e7r2p4\) Search vendor "Huawei" for product "Mate 20 Pro Firmware" and version " < 10.1.0.273\(c636e7r2p4\)" | - |
Affected
| in | Huawei Search vendor "Huawei" | Mate 20 Pro Search vendor "Huawei" for product "Mate 20 Pro" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Mate 20 Pro Firmware Search vendor "Huawei" for product "Mate 20 Pro Firmware" | < 10.1.0.277\(c10e7r2p4\) Search vendor "Huawei" for product "Mate 20 Pro Firmware" and version " < 10.1.0.277\(c10e7r2p4\)" | - |
Affected
| in | Huawei Search vendor "Huawei" | Mate 20 Pro Search vendor "Huawei" for product "Mate 20 Pro" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Mate 20 Pro Firmware Search vendor "Huawei" for product "Mate 20 Pro Firmware" | < 10.1.0.277\(c605e7r1p5\) Search vendor "Huawei" for product "Mate 20 Pro Firmware" and version " < 10.1.0.277\(c605e7r1p5\)" | - |
Affected
| in | Huawei Search vendor "Huawei" | Mate 20 Pro Search vendor "Huawei" for product "Mate 20 Pro" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | P30 Firmware Search vendor "Huawei" for product "P30 Firmware" | < 10.1.0.123\(c432e22r2p5\) Search vendor "Huawei" for product "P30 Firmware" and version " < 10.1.0.123\(c432e22r2p5\)" | - |
Affected
| in | Huawei Search vendor "Huawei" | P30 Search vendor "Huawei" for product "P30" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | P30 Firmware Search vendor "Huawei" for product "P30 Firmware" | < 10.1.0.126\(c10e7r5p1\) Search vendor "Huawei" for product "P30 Firmware" and version " < 10.1.0.126\(c10e7r5p1\)" | - |
Affected
| in | Huawei Search vendor "Huawei" | P30 Search vendor "Huawei" for product "P30" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | P30 Firmware Search vendor "Huawei" for product "P30 Firmware" | < 10.1.0.126\(c185e4r7p1\) Search vendor "Huawei" for product "P30 Firmware" and version " < 10.1.0.126\(c185e4r7p1\)" | - |
Affected
| in | Huawei Search vendor "Huawei" | P30 Search vendor "Huawei" for product "P30" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | P30 Firmware Search vendor "Huawei" for product "P30 Firmware" | < 10.1.0.126\(c605e19r1p3\) Search vendor "Huawei" for product "P30 Firmware" and version " < 10.1.0.126\(c605e19r1p3\)" | - |
Affected
| in | Huawei Search vendor "Huawei" | P30 Search vendor "Huawei" for product "P30" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | P30 Firmware Search vendor "Huawei" for product "P30 Firmware" | < 10.1.0.126\(c636e5r3p4\) Search vendor "Huawei" for product "P30 Firmware" and version " < 10.1.0.126\(c636e5r3p4\)" | - |
Affected
| in | Huawei Search vendor "Huawei" | P30 Search vendor "Huawei" for product "P30" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | P30 Firmware Search vendor "Huawei" for product "P30 Firmware" | < 10.1.0.126\(c636e7r3p4\) Search vendor "Huawei" for product "P30 Firmware" and version " < 10.1.0.126\(c636e7r3p4\)" | - |
Affected
| in | Huawei Search vendor "Huawei" | P30 Search vendor "Huawei" for product "P30" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Hima-l29c Firmware Search vendor "Huawei" for product "Hima-l29c Firmware" | < 10.1.0.273\(c636e5r2p4\) Search vendor "Huawei" for product "Hima-l29c Firmware" and version " < 10.1.0.273\(c636e5r2p4\)" | - |
Affected
| in | Huawei Search vendor "Huawei" | Hima-l29c Search vendor "Huawei" for product "Hima-l29c" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Hima-l29c Firmware Search vendor "Huawei" for product "Hima-l29c Firmware" | < 10.1.0.275\(c10e4r2p4\) Search vendor "Huawei" for product "Hima-l29c Firmware" and version " < 10.1.0.275\(c10e4r2p4\)" | - |
Affected
| in | Huawei Search vendor "Huawei" | Hima-l29c Search vendor "Huawei" for product "Hima-l29c" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Yale-l61a Firmware Search vendor "Huawei" for product "Yale-l61a Firmware" | < 10.1.0.226\(c10e3r1p1\) Search vendor "Huawei" for product "Yale-l61a Firmware" and version " < 10.1.0.226\(c10e3r1p1\)" | - |
Affected
| in | Huawei Search vendor "Huawei" | Yale-l61a Search vendor "Huawei" for product "Yale-l61a" | - | - |
Safe
|