A vulnerability classified as critical has been found in Huawei Mate 20 (Smartphone Operating System). This affects an unknown functionality of the component adb. The manipulation with an unknown input leads to a authorization vulnerability. CWE is classifying the issue as CWE-863. The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check. This allows attackers to bypass intended access restrictions. This is going to have an impact on confidentiality, integrity, and availability. The summary by CVE is:

HUAWEI Mate 20 smartphones with versions earlier than 10.0.0.188(C00E74R3P8) have an improper authorization vulnerability. The software does not properly restrict certain user's modification of certain configuration file, successful exploit could allow the attacker to bypass app lock after a series of operation in ADB mode.

The weakness was shared 04/27/2020 (Website). The advisory is shared at huawei.com. This vulnerability is uniquely identified as CVE-2020-1807 since 11/29/2019. An attack has to be approached locally. No form of authentication is needed for exploitation. Neither technical details nor an exploit are publicly available.

Upgrading to version 10.0.0.188(C00E74R3P8) eliminates this vulnerability.

The entries VDB-154450, VDB-154464 and VDB-154465 are related to this item.

Productinfo

Type

• Smartphone Operating System

Vendor

• Huawei

Name

• Mate 20

Version

• 9.0.0.205(C00E205R2P1)
• 9.1.0.135(C00E133R3P1)
• 9.1.0.139(C00E133R3P1)
• 9.1.0.193(C00E190R2P1)
• 10.0.0.175(C00E69R3P8)
• 10.0.0.175(C00E70R3P8)
• 10.0.0.185(C00E74R3P8)
• 10.0.0.188

License

• commercial

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Discussion