Improper Authentication in Huawei P20 - CVE-2020-9073
Published: May 14, 2020
Vulnerability identifier: #VU27913
CSH Severity: Low
CVSS v4: 2.4 [CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2020-9073
CWE-ID: CWE-287
Exploitation vector: Local access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a local attacker to bypass authentication process.
The vulnerability exists due to the affected software insufficiently validate the user's identity when an user wants to do certain operation. An attacker with physical access can bypass the limit of student mode function.
Affected software
Huawei P20
How to mitigate CVE-2020-9073
Install updates from vendor's website.
Huawei P20 - update to 10.0.0.156