CVE-2020-9255
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
0Exploited in Wild
-Decision
Descriptions
Huawei Honor 10 smartphones with versions earlier than 10.0.0.178(C00E178R1P4) have a denial of service vulnerability. Certain service in the system does not sufficiently validate certain parameter which is received, the attacker should trick the user into installing a malicious application, successful exploit could cause a denial of service condition.
Los teléfonos inteligentes Huawei Honor 10 con versiones anteriores a 10.0.0.178(C00E178R1P4), presentan una vulnerabilidad de denegación de servicio. Determinados servicios en el sistema no comprueban suficientemente ciertos parámetros que son recibidos, el atacante debe engañar al usuario para que instale una aplicación maliciosa, una explotación con éxito podría causar una condición de denegación de servicio
CVSS Scores
SSVC
- Decision:-
Timeline
- 2020-02-18 CVE Reserved
- 2020-07-17 CVE Published
- 2023-04-02 EPSS Updated
- 2024-08-04 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-20: Improper Input Validation
CAPEC
References (1)
| URL | Tag | Source |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200715-06-smartphone-en | 2020-07-22 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Huawei Search vendor "Huawei" | Honor 10 Firmware Search vendor "Huawei" for product "Honor 10 Firmware" | < 10.0.0.178\(c00e178r1p4\) Search vendor "Huawei" for product "Honor 10 Firmware" and version " < 10.0.0.178\(c00e178r1p4\)" | - |
Affected
| in | Huawei Search vendor "Huawei" | Honor 10 Search vendor "Huawei" for product "Honor 10" | - | - |
Safe
|