What is CVE-2020-1840?

CVE-2020-1840 is a medium-severity vulnerability in Huawei Mate_20, classified under Improper Authentication. CVSS score: 6.0/10. Published 2020-01-21.

How severe is CVE-2020-1840?

Medium severity. CVSS v3 base score is 6.0 out of 10.

Auth bypass in Huawei Mate_20

CVE-2020-1840

HUAWEI Mate 20 smart phones with versions earlier than 10.0.0.175(C00E70R3P8) have an insufficient authentication vulnerability. A local attacker with high privilege can execute a specific command to exploit this vulnerability. Successful…

Vulnerability class: Broken Authentication

EPSS: 0.002 (12.6th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.0 (Medium). Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:H.

Affected products

Huawei Mate_20
Huawei Mate_20_firmware
N/a Huawei Mate 20 — versions Versions earlier than 10.0.0.175(C00E70R3P8)

Weakness classification (CWE)

CWE-287 — Improper Authentication

References

psirt@huawei.com (x_refsource_MISC, Vendor Advisory)

Frequently asked questions

What is CVE-2020-1840?: CVE-2020-1840 is a medium-severity vulnerability in Huawei Mate_20, classified under Improper Authentication. CVSS score: 6.0/10. Published 2020-01-21.
How severe is CVE-2020-1840?: Medium severity. CVSS v3 base score is 6.0 out of 10.