CVE-2020-9250CWE-287

There is an insufficient authentication vulnerability in some Huawei smart phone

Low · published December 20, 2024

CVSS v3.1
3.3
EPSS
0%
Percentile
1.8
In the wild
Unconfirmed
What it is

There is an insufficient authentication vulnerability in some Huawei smart phone. An unauthenticated, local attacker can crafts software package to exploit this vulnerability. Due to insufficient verification, successful exploitation may impact the service. (Vulnerability ID: HWPSIRT-2019-12302)

This vulnerability has been assigned a Common Vulnerabilities and Exposures (CVE) ID: CVE-2020-9250.

The record
Technical detail
CVSS v3.1
3.3 · LOW
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
CVSS v4.0
Not supplied
EPSS
0.00122 · 1.8th percentile
Weakness
CWE-287 · Improper Authentication
Published
2024-12-20T01:50Z
EPSS history
Timeline
  • 20 DEC 01:50Z
    There is an insufficient authentication vulnerability in some Huawei smart phone
    cvelistv5