Resource exhaustion in Huawei P30

CVE-2020-9203

There is a resource management errors vulnerability in Huawei P30. Local attackers construct broadcast message for some application, causing this application to send this broadcast message and impact the customer's use experience.

Vulnerability class: DoS (Denial of Service)

EPSS: 0.002 (9.5th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 3.3 (Low). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L.

Affected products

  • Huawei P30
  • Huawei P30_firmware
  • N/a Huawei P30 — versions Versions earlier than 10.1.0.168(C00E168R2P11),Versions earlier than 10.1.0.168(C01E168R2P11),Versions earlier than 10.1.0.176(C635E4R2P4),Versions earlier than 10.1.0.177(C636E8R3P4),Versions earlier than 10.1.0.179(C10E8R5P1),Versions earlier than 10.1.0.179(C185E7R7P1),Versions earlier than 10.1.0.179(C605E23R1P3

Weakness classification (CWE)

References

Frequently asked questions

What is CVE-2020-9203?
CVE-2020-9203 is a low-severity vulnerability in Huawei P30, classified under Uncontrolled Resource Consumption. CVSS score: 3.3/10. Published 2021-01-13.
How severe is CVE-2020-9203?
Low severity. CVSS v3 base score is 3.3 out of 10.