Input validation error in Huawei Mate 20 - CVE-2020-9092
Published: October 15, 2020
Vulnerability identifier: #VU47654
CSH Severity: Low
CVSS v4: 5.1 [CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2020-9092
CWE-ID: CWE-20
Exploitation vector: Local access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a local attacker to compromise the target system.
The vulnerability exists due to insufficient validation of user-supplied input. An attacker with physical access can bypass filter mechanism to launch JavaScript injection. This could compromise normal service of the affected module.
Affected software
Huawei Mate 20
How to mitigate CVE-2020-9092
Install updates from vendor's website.
Huawei Mate 20 - update to 10.1.0.163