CVE-2020-9080

There is an improper privilege management vulnerability in Huawei smart phone product. A local, authenticated attacker could craft a specific input to exploit this vulnerability. Successful exploitation may lead to local privilege escalation. (Vulnerability ID: HWPSIRT-2020-05272) This vulnerability has been assigned a Common Vulnerabilities and Exposures (CVE) ID: CVE-2020-9080.

CVSS v3 7.8 HIGH

7.8^/10

CVSS v3 : HIGH

Vector :

Exploitability : 1.8 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200819-01-smartphone-en	Vendor Advisory

Configurations

Configuration 1 (hide)

AND

cpe:2.3:o:huawei:mate_20_pro_firmware:10.1.0.135\(c01e135r2p8\):*:*:*:*:*:*:*

cpe:2.3:h:huawei:mate_20_pro:-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND

cpe:2.3:o:huawei:mate_20_pro_\(ud\)_firmware:10.1.0.135\(c00e135r3p8\):*:*:*:*:*:*:*

cpe:2.3:h:huawei:mate_20_pro_\(ud\):-:*:*:*:*:*:*:*

Configuration 3 (hide)

AND

cpe:2.3:o:huawei:nova_5i_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:huawei:nova_5i:-:*:*:*:*:*:*:*

History

No history.

Information

Published : 2024-12-27 10:15

Updated : 2025-01-10 20:36

NVD link : CVE-2020-9080

Mitre link : CVE-2020-9080

CVE.ORG link : CVE-2020-9080

JSON object : View

Products Affected

huawei

mate_20_pro_firmware
mate_20_pro_\(ud\)
nova_5i
mate_20_pro
mate_20_pro_\(ud\)_firmware
nova_5i_firmware

CWE

CWE-269

Improper Privilege Management

NVD-CWE-noinfo

{"id": "CVE-2020-9080", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "[email protected]", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.8, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 1.8}, {"type": "Primary", "source": "[email protected]", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.8, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 1.8}]}, "published": "2024-12-27T10:15:10.313", "references": [{"url": "https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200819-01-smartphone-en", "tags": ["Vendor Advisory"], "source": "[email protected]"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "[email protected]", "description": [{"lang": "en", "value": "CWE-269"}]}, {"type": "Primary", "source": "[email protected]", "description": [{"lang": "en", "value": "NVD-CWE-noinfo"}]}], "descriptions": [{"lang": "en", "value": "There is an improper privilege management vulnerability in Huawei smart phone product. A local, authenticated attacker could craft a specific input to exploit this vulnerability. Successful exploitation may lead to local privilege escalation. (Vulnerability ID: HWPSIRT-2020-05272)\n\nThis vulnerability has been assigned a Common Vulnerabilities and Exposures (CVE) ID: CVE-2020-9080."}, {"lang": "es", "value": "Existe una vulnerabilidad de administraci\u00f3n de privilegios indebida en el tel\u00e9fono inteligente Huawei. Un atacante local autenticado podr\u00eda crear una entrada espec\u00edfica para explotar esta vulnerabilidad. Una explotaci\u00f3n exitosa puede llevar a una escalada de privilegios locales. (ID de vulnerabilidad: HWPSIRT-2020-05272) A esta vulnerabilidad se le ha asignado un ID de vulnerabilidad y exposici\u00f3n com\u00fan (CVE): CVE-2020-9080."}], "lastModified": "2025-01-10T20:36:43.037", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:huawei:mate_20_pro_firmware:10.1.0.135\\(c01e135r2p8\\):*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EE467542-DA67-4109-B369-3D409A5CCD76"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:huawei:mate_20_pro:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "2564E28F-EF08-4381-96D8-58BB7C8C0E0C"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:huawei:mate_20_pro_\\(ud\\)_firmware:10.1.0.135\\(c00e135r3p8\\):*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0FCFA338-54BC-4236-BDD7-E4AB72975CAA"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:huawei:mate_20_pro_\\(ud\\):-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "0BBC5CE7-08FC-49BF-A1B1-A445293BC13C"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:huawei:nova_5i_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E9782022-4969-4B3E-810E-EECB9AA63836", "versionEndExcluding": "10.0.0.125\\(c01e123r7p3\\)"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:huawei:nova_5i:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "CDB534B3-F9B6-4EFC-A13B-7BC50ABE59CE"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "[email protected]"}