CVE-2020-9260: huawei p30_firmware
Vulnerability summary
CVE-2020-9260 is a medium (CVSS 6.5) vulnerability in huawei p30_firmware. EPSS estimates a 0.34% chance of exploitation in the next 30 days, higher than 26.1% of scored vulnerabilities.
Timeline
- 10-07-2020PublishedVulnerability first disclosed.
- 04-08-2024Last modifiedVulnerability information updated.
Description
HUAWEI P30 and HUAWEI P30 Pro smartphones with versions earlier than 10.1.0.123(C432E22R2P5) and versions earlier than 10.1.0.160(C00E160R2P8) have an information disclosure vulnerability. Certain WI-FI function's default configuration in the system seems insecure, an attacker should craft a WI-FI hotspot to launch the attack. Successful exploit could cause information disclosure.
CVSS metrics
2 scores · 1 source · 2 versionsEPSS trend
Probability
0.34%
Chance of exploitation in the next 30 days
Percentile
26%
Versus all other CVEs
30-day change
0.00 pp
From 0.34% on 19-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Huawei2 products
- p30_firmware< 10.1.0.123\(c432e22r2p5\)
- p30_pro_firmware< 10.1.0.160\(c00e160r2p8\)
1 vendor · 2 products
References
1 links- www.huawei.com/en/psirt/security-advisories/huawei-sa-20200708-01-smartphone-enX Refsource MISCVendor Advisory