CVE-2020-9089 — Huawei / HUAWEI P30 Pro

Description (CNA)

There is an information vulnerability in Huawei smartphones. A function in a module can be called without verifying the caller's access. Attackers with user access can exploit this vulnerability to obtain some information. This can lead to information leak. (Vulnerability ID: HWPSIRT-2019-12141) This vulnerability has been assigned a Common Vulnerabilities and Exposures (CVE) ID: CVE-2020-9089.

Affected (CNA)

Vendor / product	Versions
Huawei / HUAWEI P30 Pro	affected Versions earlier than 10.1.0.120(C431E19R2P5); affected Versions earlier than 10.1.0.120(C432E19R2P5); affected Versions earlier than 10.1.0.126(C10E11R5P1); affected Versions earlier than 10.1.0.126(C461E11R3P1)

CWE

CWE-200

References

https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200826-09-smartphone-en

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.