CVE-2020-9080CWE-269

There is an improper privilege management vulnerability in Huawei smart phone product

High · published December 27, 2024

CVSS v3.1
7.8
EPSS
0%
Percentile
2.3
In the wild
Unconfirmed
What it is

There is an improper privilege management vulnerability in Huawei smart phone product. A local, authenticated attacker could craft a specific input to exploit this vulnerability. Successful exploitation may lead to local privilege escalation. (Vulnerability ID: HWPSIRT-2020-05272)

This vulnerability has been assigned a Common Vulnerabilities and Exposures (CVE) ID: CVE-2020-9080.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00129 · 2.3th percentile
Weakness
CWE-269 · Improper Privilege Management
Published
2024-12-27T09:23Z
EPSS history
Timeline
  • 27 DEC 09:23Z
    There is an improper privilege management vulnerability in Huawei smart phone product
    cvelistv5