CVE-2020-1785
Medium
Description
Mate 10 Pro;Honor V10;Honor 10;Nova 4 smartphones have a denial of service vulnerability. The system does not properly check the status of certain module during certain operations, an attacker should trick the user into installing a malicious application, successful exploit could cause reboot of the smartphone.
SeverityMedium
CVSS5.5
Exploit probability—
ProductHuawei Mate 10 Pro Firmware
PublishedJan 3, 2020
First seenJan 3, 2020
How to fix
Update
- huawei mate_10_pro_firmware9.1.0.321\(c605e4r1p13t8\), 9.1.0.321\(c636e4r1p14t8\), 9.1.0.330\(c432e6r1p12t8\) or later
- huawei honor_v10_firmware9.1.0.333\(c00e333r2p1t8\), 9.1.0.350\(c636e4r1p13t8\), 9.1.0.351\(c432e5r1p13t8\) or later
- huawei honor_10_firmware9.1.0.350\(c10e5r1p14t8\), 9.1.0.350\(c185e3r1p12t8\), 9.1.0.350\(c461e3r1p11t8\), 9.1.0.350\(c636e3r1p13t8\), 9.1.0.351\(c432e5r1p13t8\) or later
- huawei nova_4_firmware9.1.0.225\(c636e1r4p1\) or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| huawei mate_10_pro_firmware | v < 9.1.0.321\(c605e4r1p13t8\), v < 9.1.0.321\(c636e4r1p14t8\), v < 9.1.0.330\(c432e6r1p12t8\) | 9.1.0.321\(c605e4r1p13t8\), 9.1.0.321\(c636e4r1p14t8\), 9.1.0.330\(c432e6r1p12t8\) |
| huawei honor_v10_firmware | v < 9.1.0.333\(c00e333r2p1t8\), v < 9.1.0.350\(c636e4r1p13t8\), v < 9.1.0.351\(c432e5r1p13t8\) | 9.1.0.333\(c00e333r2p1t8\), 9.1.0.350\(c636e4r1p13t8\), 9.1.0.351\(c432e5r1p13t8\) |
| huawei honor_10_firmware | v < 9.1.0.350\(c10e5r1p14t8\), v < 9.1.0.350\(c185e3r1p12t8\), v < 9.1.0.350\(c461e3r1p11t8\), v < 9.1.0.350\(c636e3r1p13t8\), v < 9.1.0.351\(c432e5r1p13t8\) | 9.1.0.350\(c10e5r1p14t8\), 9.1.0.350\(c185e3r1p12t8\), 9.1.0.350\(c461e3r1p11t8\), 9.1.0.350\(c636e3r1p13t8\), 9.1.0.351\(c432e5r1p13t8\) |
| huawei nova_4_firmware | v < 9.1.0.225\(c636e1r4p1\) | 9.1.0.225\(c636e1r4p1\) |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.