CVE-2020-1882
Medium
Description
Huawei mobile phones Ever-L29B versions earlier than 10.0.0.180(C185E6R3P3), earlier than 10.0.0.180(C432E6R1P7), earlier than 10.0.0.180(C636E5R2P3); HUAWEI Mate 20 RS versions earlier than 10.0.0.175(C786E70R3P8); HUAWEI Mate 20 X versions earlier than 10.0.0.176(C00E70R2P8); and Honor Magic2 versions earlier than 10.0.0.175(C00E59R2P11) have an improper authorization vulnerability. Due to improper authorization of some function, attackers can bypass the authorization to perform some operations.
SeverityMedium
CVSS4.6
Exploit probability—
ProductHuawei Mate 20 Rs Firmware
PublishedFeb 18, 2020
First seenFeb 18, 2020
How to fix
Update
- huawei mate_20_rs_firmware10.0.0.175\(c786e70r3p8\) or later
- huawei mate_20_x_firmware10.0.0.176\(c00e70r2p8\) or later
- huawei honor_magic2_firmware10.0.0.175\(c00e59r2p11\) or later
- huawei ever-l29b_firmware10.0.0.180\(c185e6r3p3\), 10.0.0.180\(c432e6r1p7\), 10.0.0.180\(c636e5r2p3\) or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| huawei mate_20_rs_firmware | v < 10.0.0.175\(c786e70r3p8\) | 10.0.0.175\(c786e70r3p8\) |
| huawei mate_20_x_firmware | v < 10.0.0.176\(c00e70r2p8\) | 10.0.0.176\(c00e70r2p8\) |
| huawei honor_magic2_firmware | v < 10.0.0.175\(c00e59r2p11\) | 10.0.0.175\(c00e59r2p11\) |
| huawei ever-l29b_firmware | v < 10.0.0.180\(c185e6r3p3\), v < 10.0.0.180\(c432e6r1p7\), v < 10.0.0.180\(c636e5r2p3\) | 10.0.0.180\(c185e6r3p3\), 10.0.0.180\(c432e6r1p7\), 10.0.0.180\(c636e5r2p3\) |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.