What is CVE-2020-9109?

CVE-2020-9109 is a medium-severity vulnerability in Huawei Laya-al00ep, classified under Improper Authentication. CVSS score: 4.6/10. Published 2020-10-12.

How severe is CVE-2020-9109?

Medium severity. CVSS v3 base score is 4.6 out of 10.

Auth bypass in Huawei Laya-al00ep

CVE-2020-9109

There is an information disclosure vulnerability in several smartphones. The device does not sufficiently validate the identity of smart wearable device in certain specific scenario, the attacker need to gain certain information in the vic…

Vulnerability class: Broken Authentication

EPSS: 0.002 (12.1th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 4.6 (Medium). Vector: CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N.

Affected products

Huawei Laya-al00ep
Huawei Laya-al00ep_firmware
Huawei Mate_20
Huawei Mate_20_firmware
Huawei Mate_20_x
Huawei Mate_20_x_firmware
Huawei P30_pro
Huawei P30_pro_firmware
Huawei Tony-al00b
Huawei Tony-al00b_firmware

Weakness classification (CWE)

CWE-287 — Improper Authentication

References

psirt@huawei.com (x_refsource_MISC, Vendor Advisory)

Frequently asked questions

What is CVE-2020-9109?: CVE-2020-9109 is a medium-severity vulnerability in Huawei Laya-al00ep, classified under Improper Authentication. CVSS score: 4.6/10. Published 2020-10-12.
How severe is CVE-2020-9109?: Medium severity. CVSS v3 base score is 4.6 out of 10.