Details of VAR-202008-1244

ID

VAR-202008-1244

CVE

CVE-2020-9089

TITLE

Huawei of P30 Pro Firmware vulnerabilities

Trust: 0.8

sources: JVNDB: JVNDB-2020-018347

DESCRIPTION

There is an information vulnerability in Huawei smartphones. A function in a module can be called without verifying the caller's access. Attackers with user access can exploit this vulnerability to obtain some information. This can lead to information leak. (Vulnerability ID: HWPSIRT-2019-12141) This vulnerability has been assigned a Common Vulnerabilities and Exposures (CVE) ID: CVE-2020-9089. Huawei of P30 Pro There are unspecified vulnerabilities in the firmware.Information may be obtained

Trust: 1.62

sources: NVD: CVE-2020-9089 // JVNDB: JVNDB-2020-018347

AFFECTED PRODUCTS

vendor:	huawei	model:	p30 pro	scope:	lt	version:	10.1.0.126\(c10e11r5p1\)	Trust: 1.0
vendor:	huawei	model:	p30 pro	scope:	lt	version:	10.1.0.120\(c431e19r2p5\)	Trust: 1.0
vendor:	huawei	model:	p30 pro	scope:	lt	version:	10.1.0.126\(c461e11r3p1\)	Trust: 1.0
vendor:	huawei	model:	p30 pro	scope:	lt	version:	10.1.0.120\(c432e19r2p5\)	Trust: 1.0
vendor:	huawei	model:	p30 pro	scope:	-	version:	-	Trust: 0.8
vendor:	huawei	model:	p30 pro	scope:	eq	version:	p30 pro firmware 10.1.0.126(c461e11r3p1)	Trust: 0.8
vendor:	huawei	model:	p30 pro	scope:	eq	version:	p30 pro firmware 10.1.0.126(c10e11r5p1)	Trust: 0.8
vendor:	huawei	model:	p30 pro	scope:	eq	version:	-	Trust: 0.8
vendor:	huawei	model:	p30 pro	scope:	eq	version:	p30 pro firmware 10.1.0.120(c432e19r2p5)	Trust: 0.8
vendor:	huawei	model:	p30 pro	scope:	eq	version:	p30 pro firmware 10.1.0.120(c431e19r2p5)	Trust: 0.8

sources: JVNDB: JVNDB-2020-018347 // NVD: CVE-2020-9089

CVSS

SEVERITY

CVSSV2

CVSSV3

psirt@huawei.com:	CVE-2020-9089
value:	LOW
Trust: 1.0
nvd@nist.gov:	CVE-2020-9089
value:	LOW
Trust: 1.0
NVD:	CVE-2020-9089
value:	LOW
Trust: 0.8
CNNVD:	CNNVD-202008-1322
value:	LOW
Trust: 0.6

psirt@huawei.com:	CVE-2020-9089
baseSeverity:	LOW
baseScore:	3.3
vectorString:	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
attackVector:	LOCAL
attackComplexity:	LOW
privilegesRequired:	LOW
userInteraction:	NONE
scope:	UNCHANGED
confidentialityImpact:	LOW
integrityImpact:	NONE
availabilityImpact:	NONE
exploitabilityScore:	1.8
impactScore:	1.4
version:	3.1
Trust: 2.0
NVD:	CVE-2020-9089
baseSeverity:	LOW
baseScore:	3.3
vectorString:	CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
attackVector:	LOCAL
attackComplexity:	LOW
privilegesRequired:	LOW
userInteraction:	NONE
scope:	UNCHANGED
confidentialityImpact:	LOW
integrityImpact:	NONE
availabilityImpact:	NONE
exploitabilityScore:	NONE
impactScore:	NONE
version:	3.0
Trust: 0.8

sources: JVNDB: JVNDB-2020-018347 // CNNVD: CNNVD-202008-1322 // NVD: CVE-2020-9089 // NVD: CVE-2020-9089

PROBLEMTYPE DATA

problemtype:	NVD-CWE-noinfo	Trust: 1.0
problemtype:	CWE-200	Trust: 1.0
problemtype:	information leak (CWE-200) [ others ]	Trust: 0.8
problemtype:	Lack of information (CWE-noinfo) [NVD evaluation ]	Trust: 0.8

sources: JVNDB: JVNDB-2020-018347 // NVD: CVE-2020-9089

TYPE

other

Trust: 0.6

sources: CNNVD: CNNVD-202008-1322

PATCH

title:

Huawei product security vulnerabilities repair measures

url:

http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=126965

Trust: 0.6

sources: CNNVD: CNNVD-202008-1322

EXTERNAL IDS

db:	NVD	id:	CVE-2020-9089	Trust: 3.2
db:	JVNDB	id:	JVNDB-2020-018347	Trust: 0.8
db:	CNNVD	id:	CNNVD-202008-1322	Trust: 0.6

sources: JVNDB: JVNDB-2020-018347 // CNNVD: CNNVD-202008-1322 // NVD: CVE-2020-9089

REFERENCES

url:	https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200826-09-smartphone-en	Trust: 1.8
url:	https://nvd.nist.gov/vuln/detail/cve-2020-9089	Trust: 0.8
url:	https://www.huawei.com/cn/psirt/security-advisories/huawei-sa-20200826-09-smartphone-cn	Trust: 0.6

sources: JVNDB: JVNDB-2020-018347 // CNNVD: CNNVD-202008-1322 // NVD: CVE-2020-9089

SOURCES

db:	JVNDB	id:	JVNDB-2020-018347
db:	CNNVD	id:	CNNVD-202008-1322
db:	NVD	id:	CVE-2020-9089

LAST UPDATE DATE

2025-01-15T23:07:20.269000+00:00

SOURCES UPDATE DATE

db:	JVNDB	id:	JVNDB-2020-018347	date:	2025-01-14T06:47:00
db:	CNNVD	id:	CNNVD-202008-1322	date:	2020-09-29T00:00:00
db:	NVD	id:	CVE-2020-9089	date:	2025-01-13T18:58:56.063

SOURCES RELEASE DATE

db:	JVNDB	id:	JVNDB-2020-018347	date:	2025-01-14T00:00:00
db:	CNNVD	id:	CNNVD-202008-1322	date:	2020-08-26T00:00:00
db:	NVD	id:	CVE-2020-9089	date:	2024-12-27T10:15:13.487