CVE-2020-9089CWE-200

There is an information vulnerability in Huawei smartphones

Low · published December 27, 2024

CVSS v3.1
3.3
EPSS
0%
Percentile
3.1
In the wild
Unconfirmed
What it is

There is an information vulnerability in Huawei smartphones. A function in a module can be called without verifying the caller's access. Attackers with user access can exploit this vulnerability to obtain some information. This can lead to information leak. (Vulnerability ID: HWPSIRT-2019-12141)

This vulnerability has been assigned a Common Vulnerabilities and Exposures (CVE) ID: CVE-2020-9089.

The record
Technical detail
CVSS v3.1
3.3 · LOW
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00141 · 3.1th percentile
Weakness
CWE-200 · Exposure of Sensitive Information to an Unauthorized Actor
Published
2024-12-27T09:44Z
EPSS history
Timeline
  • 27 DEC 09:44Z
    There is an information vulnerability in Huawei smartphones
    cvelistv5