There is an improper authorization vulnerability in some Huawei smartphones. An attacker could perform a series of operation in specific mode to exploit this vulnerability. Successful exploit could allow the attacker to bypass app lock. (Vulnerability ID: HWPSIRT-2019-12144)
This vulnerability has been assigned a Common Vulnerabilities and Exposures (CVE) ID: CVE-2020-9081.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
HUAWEI Mate 20
Vendor
Huawei
Product
HUAWEI Mate 20
Platforms
Unknown
Default status
unaffected
HUAWEI Mate 20 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
Versions earlier than 10.1.0.160(C00E160R3P8)
affected
Unavailable
Unavailable
Unavailable
None listed
Versions earlier than 10.1.0.160(C01E160R2P8)
affected
Unavailable
Unavailable
Unavailable
None listed
HUAWEI P30
Vendor
Huawei
Product
HUAWEI P30
Platforms
Unknown
Default status
unaffected
HUAWEI P30 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
Versions earlier than 10.1.0.160(C00E160R2P11)
affected
Unavailable
Unavailable
Unavailable
None listed
HUAWEI P30 Pro
Vendor
Huawei
Product
HUAWEI P30 Pro
Platforms
Unknown
Default status
unaffected
HUAWEI P30 Pro · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
Versions earlier than 10.1.0.160(C00E160R2P8)
affected
Unavailable
Unavailable
Unavailable
None listed
Versions earlier than 10.1.0.160(C01E160R2P8)
affected
Unavailable
Unavailable
Unavailable
None listed
Princeton-AL10D
Vendor
Huawei
Product
Princeton-AL10D
Platforms
Unknown
Default status
unaffected
Princeton-AL10D · Scoped product and version facts