CVE-2020-9259 Auth bypass in Honor V30
Improper authentication in Huawei Honor V30 allows attackers to disclose information by tricking users into installing malicious applications.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2020-9259?
CVE-2020-9259 is a medium-severity authentication bypass vulnerability in Huawei Honor V30, published on 17 Jul 2020. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.
Official description
Huawei Honor V30 smartphones with versions earlier than 10.1.0.212(C00E210R5P1) have an improper authentication vulnerability. The system does not sufficiently validate certain parameter passed from the bottom level, the attacker should trick the user into installing a malicious application and control the bottom level, successful exploit could cause information disclosure.
Weakness: CWE-287
Which versions are affected by CVE-2020-9259?
It affects 1 product.
Products include Huawei Honor V30 Firmware.
How do I fix CVE-2020-9259?
No fix has been published for CVE-2020-9259 yet. Limit exposure of the affected software until one is available.
Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.
Is CVE-2020-9259 being exploited?
There is no known exploitation of CVE-2020-9259 in the wild and no public exploit code.
Other vulnerabilities in Huawei Honor V30
Sources
Also known as GHSA-j5hv-hr2w-w46g.