CVE-2020-1835 : HUAWEI Mate 30 with versions earlier than 10.1.0.126(C00E125R5P3) have an information disclosure vulnerability. A logic

HUAWEI Mate 30 with versions earlier than 10.1.0.126(C00E125R5P3) have an information disclosure vulnerability. A logic judgment error occurs when the system handling Bluetooth connections, an attacker could craft as an authenticated Bluetooth peer to launch the attack. Successful exploit could cause information disclosure.

Published 2020-06-18 14:15:11

Updated 2021-07-21 11:39:24

Source Huawei Technologies

View at NVD, CVE.org

Vulnerability category: Information leak

Exploit prediction scoring system (EPSS) score for CVE-2020-1835

EPSS FAQ

0.07%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 27 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2020-1835

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
3.3	LOW	AV:A/AC:L/Au:N/C:P/I:N/A:N	6.5	2.9	NIST
Access Vector: Adjacent Network Access Complexity: Low Authentication: None Confidentiality Impact: Partial Integrity Impact: None Availability Impact: None
6.5	MEDIUM	CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N	2.8	3.6	NIST
Attack Vector: Adjacent Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: High Integrity: None Availability: None

Products affected by CVE-2020-1835

Huawei » Mate 30 Firmware
Versions before (<) 10.1.0.126\(c00e125r5p3\)
cpe:2.3:o:huawei:mate_30_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » Mate 30 » Version: N/A

Vulnerability Details : CVE-2020-1835

Exploit prediction scoring system (EPSS) score for CVE-2020-1835

CVSS scores for CVE-2020-1835

References for CVE-2020-1835

Products affected by CVE-2020-1835