Vulnerability Details : CVE-2020-9119
There is a privilege escalation vulnerability on some Huawei smart phones due to design defects. The attacker needs to physically contact the mobile phone and obtain higher privileges, and execute relevant commands, resulting in the user's privilege promotion.
Vulnerability category: Gain privilege
Products affected by CVE-2020-9119
- cpe:2.3:o:huawei:mate_10_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:huawei:mate_30_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:huawei:mate_30_pro_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:huawei:p40_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:huawei:p40_pro_firmware:*:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2020-9119
0.03%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 5 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2020-9119
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
4.6
|
MEDIUM | AV:L/AC:L/Au:N/C:P/I:P/A:P |
3.9
|
6.4
|
NIST | |
|
6.2
|
MEDIUM | CVSS:3.1/AV:P/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H |
0.3
|
5.9
|
NIST |
References for CVE-2020-9119
-
https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20201202-01-smartphone-en
Security Advisory - Privilege Escalation Vulnerability in Huawei SmartphoneVendor Advisory
Jump to