Auth bypass in Huawei Honor 9x

CVE-2020-1833

Honor 9X smartphones with versions earlier than 9.1.1.172(C00E170R8P1) have an improper authentication vulnerability. A logic error occurs when handling clock function, an attacker should do a series of crafted operations quickly before the phone is unlocked, successful exploit could allow the attacker to access clock information without unlock the phone.

Vulnerability class: Broken Authentication

EPSS: 0.002 (16.1th percentile) — read the EPSS interpretation.