What is CVE-2020-1878?

CVE-2020-1878 is a medium-severity vulnerability in Huawei Oxfords-An00a, classified under Improper Authentication. CVSS score: 5.5/10. Published 2020-03-20.

How severe is CVE-2020-1878?

Medium severity. CVSS v3 base score is 5.5 out of 10.

Auth bypass in Huawei Oxfords-An00a

CVE-2020-1878

Huawei smartphone OxfordS-AN00A with versions earlier than 10.0.1.152D(C735E152R3P3),versions earlier than 10.0.1.160(C00E160R4P1) have an improper authentication vulnerability. Authentication to target component is improper when device performs an operation. Attackers exploit this vulnerability to obtain some information by loading malicious application, leading to information leak.

Vulnerability class: Broken Authentication

EPSS: 0.002 (16.4th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.5 (Medium). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N.

Affected products

Huawei Oxfords-an00a
Huawei Oxfords-an00a_firmware
N/a Oxfords-an00a — versions Versions earlier than 10.0.1.152D(C735E152R3P3),Versions earlier than 10.0.1.160(C00E160R4P1)

Weakness classification (CWE)

CWE-287 — Improper Authentication

References

psirt@huawei.com (x_refsource_MISC, Vendor Advisory)
psirt@huawei.com (x_refsource_CONFIRM, Not Applicable)

Frequently asked questions

What is CVE-2020-1878?: CVE-2020-1878 is a medium-severity vulnerability in Huawei Oxfords-An00a, classified under Improper Authentication. CVSS score: 5.5/10. Published 2020-03-20.
How severe is CVE-2020-1878?: Medium severity. CVSS v3 base score is 5.5 out of 10.