CVE-2020-9119 Privilege escalation in HUAWEI Mate 10;HUAWEI Mate 30;HUAWEI Mate 30 Pro;HUAWEI P40;HUAWEI P40 Pro

Medium 6.2 Published 24 Dec 2020 Updated 4 Aug 2024

Physical access allows attackers to escalate privileges and execute commands on Huawei smartphones due to design defects.

Exploited in the wild: Not known
Login needed: An administrator
Attackable: Local or same network only
Victim action needed: Not needed
Fix: None listed

What is CVE-2020-9119?

CVE-2020-9119 is a medium-severity vulnerability in HUAWEI Mate 10;HUAWEI Mate 30;HUAWEI Mate 30 Pro;HUAWEI P40;HUAWEI P40 Pro, published on 24 Dec 2020. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

There is a privilege escalation vulnerability on some Huawei smart phones due to design defects. The attacker needs to physically contact the mobile phone and obtain higher privileges, and execute relevant commands, resulting in the user's privilege promotion.

Which versions are affected by CVE-2020-9119?

It affects 5 products.

Products include Huawei Mate 10 Firmware, Huawei Mate 30 Firmware, Huawei Mate 30 Pro Firmware, Huawei P40 Firmware, Huawei P40 Pro Firmware.

How do I fix CVE-2020-9119?

No fix has been published for CVE-2020-9119 yet. Limit exposure of the affected software until one is available.

Is CVE-2020-9119 being exploited?

There is no known exploitation of CVE-2020-9119 in the wild and no public exploit code.

Sources

Also known as GHSA-5v7h-9v5g-w2x6.