CVE-2020-9080: huawei huawei mate 20 pro Improper Privilege Management

Vulnerability summary

CVE-2020-9080 is a high (CVSS 7.8) Improper Privilege Management vulnerability in huawei huawei mate 20 pro. EPSS estimates a 0.13% chance of exploitation in the next 30 days, higher than 2.3% of scored vulnerabilities.

Timeline

1. 27-12-2024
   PublishedVulnerability first disclosed.
2. 27-12-2024
   Last modifiedVulnerability information updated.

Description

There is an improper privilege management vulnerability in Huawei smart phone product. A local, authenticated attacker could craft a specific input to exploit this vulnerability. Successful exploitation may lead to local privilege escalation. (Vulnerability ID: HWPSIRT-2020-05272) This vulnerability has been assigned a Common Vulnerabilities and Exposures (CVE) ID: CVE-2020-9080.

• CWE-269Improper Privilege ManagementThe product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.