CVE-2020-9250: huawei mate 20 pro firmware

csirt@kutim:~/threat-intel/cve/CVE-2020-9250

CVSS 3.3 · Low EPSS 0,12%

Kerentanan Improper Authentication pada huawei mate 20 pro firmware. Skor CVSS 3.1 3.3 (Low) menurut huawei.com.

Deskripsi (NVD)

There is an insufficient authentication vulnerability in some Huawei smart phone. An unauthenticated, local attacker can crafts software package to exploit this vulnerability. Due to insufficient verification, successful exploitation may impact the service. (Vulnerability ID: HWPSIRT-2019-12302) This vulnerability has been assigned a Common Vulnerabilities and Exposures (CVE) ID: CVE-2020-9250.

Rincian

Terbit di NVD: 20 Desember 2024
Terakhir diubah: 17 Juni 2026
Status NVD: Analyzed
CVSS 3.1: 3.3 (Low), sumber huawei.com
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L · uraikan di kalkulator
Jenis kelemahan (CWE): CWE-287: Improper Authentication
CWE-522: Insufficiently Protected Credentials
EPSS (30 hari): 0,12% peluang dieksploitasi; lebih tinggi dari 1,7% CVE lain

Produk dan versi terdampak

Vendor	Produk	Versi terdampak
huawei	mate 20 pro firmware	Versi 10.1.0.160(c00e160r3p8)

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200729-01-smartphone-en broken link · advisory vendor

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:10 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.