CVE-2020-9081: huawei huawei mate 20 Improper Authorization
Vulnerability summary
CVE-2020-9081 is a medium (CVSS 6.8) Improper Authorization vulnerability in huawei huawei mate 20. EPSS estimates a 0.20% chance of exploitation in the next 30 days, higher than 9.5% of scored vulnerabilities.
Timeline
- 27-12-2024PublishedVulnerability first disclosed.
- 27-12-2024Last modifiedVulnerability information updated.
Description
There is an improper authorization vulnerability in some Huawei smartphones. An attacker could perform a series of operation in specific mode to exploit this vulnerability. Successful exploit could allow the attacker to bypass app lock. (Vulnerability ID: HWPSIRT-2019-12144) This vulnerability has been assigned a Common Vulnerabilities and Exposures (CVE) ID: CVE-2020-9081.
CVSS metrics
2 scores · 2 sources · 1 version- CVE.orgCNA3.5LowCVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:NDiffers
EPSS trend
Probability
0.20%
Chance of exploitation in the next 30 days
Percentile
10%
Versus all other CVEs
30-day change
0.00 pp
From 0.20% on 19-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root cause- CWE-285Improper AuthorizationThe product does not perform or incorrectly performs an authorization check when an actor attempts to access a resource or perform an action.
- CWE-863Incorrect AuthorizationThe product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check.
Affected systems
Huawei10 products
- huawei mate 20Versions earlier than 10.1.0.160(C00E160R3P8) | Versions earlier than 10.1.0.160(C01E160R2P8)
- huawei p30Versions earlier than 10.1.0.160(C00E160R2P11)
- huawei p30 proVersions earlier than 10.1.0.160(C00E160R2P8) | Versions earlier than 10.1.0.160(C01E160R2P8)
- mate_20_firmware< 10.1.0.160\(c00e160r3p8\) | < 10.1.0.160\(c01e160r2p8\)
- p30_firmware< 10.1.0.160\(c00e160r2p11\)
1 vendor · 10 products