CVE-2020-1787: huawei huawei mate 20 Improper Authentication
Vulnerability summary
CVE-2020-1787 is a high (CVSS 7.2) Improper Authentication vulnerability in huawei huawei mate 20. EPSS estimates a 0.26% chance of exploitation in the next 30 days, higher than 16.9% of scored vulnerabilities.
Timeline
- 09-01-2020PublishedVulnerability first disclosed.
- 04-08-2024Last modifiedVulnerability information updated.
Description
HUAWEI Mate 20 smartphones versions earlier than 9.1.0.139(C00E133R3P1) have an improper authentication vulnerability. The system has a logic error under certain scenario, successful exploit could allow the attacker who gains the privilege of guest user to access to the host user's desktop in an instant, without unlocking the screen lock of the host user.
CVSS metrics
2 scores · 1 source · 2 versionsEPSS trend
Probability
0.26%
Chance of exploitation in the next 30 days
Percentile
17%
Versus all other CVEs
30-day change
0.00 pp
From 0.26% on 20-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Huawei2 products
- huawei mate 20Versions earlier than 9.1.0.139(C00E133R3P1)
- mate_20_firmware< 9.1.0.139\(c00e133r3p1\)
1 vendor · 2 products
References
1 links- www.huawei.com/en/psirt/security-advisories/huawei-sa-20200108-02-smartphone-enX Refsource CONFIRMVendor Advisory