CVE-2020-9235
Description
Huawei smartphones HONOR 20 PRO Versions earlier than 10.1.0.230(C432E9R5P1),Versions earlier than 10.1.0.231(C10E3R3P2),Versions earlier than 10.1.0.231(C185E3R5P1),Versions earlier than 10.1.0.231(C636E3R3P1);Versions earlier than 10.1.0.212(C432E10R3P4),Versions earlier than 10.1.0.213(C636E3R4P3),Versions earlier than 10.1.0.214(C10E5R4P3),Versions earlier than 10.1.0.214(C185E3R3P3);Versions earlier than 10.1.0.212(C00E210R5P1);Versions earlier than 10.1.0.160(C00E160R2P11);Versions earlier than 10.1.0.160(C00E160R2P11);Versions earlier than 10.1.0.160(C01E160R2P11);Versions earlier than 10.1.0.160(C00E160R2P11);Versions earlier than 10.1.0.160(C00E160R8P12);Versions earlier than 10.1.0.230(C432E9R5P1),Versions earlier than 10.1.0.231(C10E3R3P2),Versions earlier than 10.1.0.231(C636E3R3P1);Versions earlier than 10.1.0.225(C431E3R1P2),Versions earlier than 10.1.0.225(C432E3R1P2) contain an information vulnerability. A module has a design error that is lack of control of input. Attackers can exploit this vulnerability to obtain some information. This can lead to information leak.
How to fix
- huawei honor_20_pro_firmware10.1.0.230\(c432e9r5p1\), 10.1.0.231\(c10e3r3p2\), 10.1.0.231\(c185e3r5p1\), 10.1.0.231\(c636e3r3p1\) or later
- huawei honor_view_20_firmware10.1.0.212\(c432e10r3p4\), 10.1.0.213\(c636e3r4p3\), 10.1.0.214\(c10e5r4p3\), 10.1.0.214\(c185e3r3p3\) or later
- huawei oxfords-an00a_firmware10.1.0.212\(c00e210r5p1\) or later
- huawei princeton-al10b_firmware10.1.0.160\(c00e160r2p11\) or later
- huawei princeton-al10d_firmware10.1.0.160\(c00e160r2p11\) or later
- huawei princeton-tl10c_firmware10.1.0.160\(c01e160r2p11\) or later
- huawei tony-al00b_firmware10.1.0.160\(c00e160r2p11\) or later
- huawei yale-al00a_firmware10.1.0.160\(c00e160r8p12\) or later
- huawei yale-l21a_firmware10.1.0.230\(c432e9r5p1\), 10.1.0.231\(c10e3r3p2\), 10.1.0.231\(c636e3r3p1\) or later
- huawei yale-l61a_firmware10.1.0.225\(c431e3r1p2\), 10.1.0.225\(c432e3r1p2\) or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| huawei honor_20_pro_firmware | v < 10.1.0.230\(c432e9r5p1\), v < 10.1.0.231\(c10e3r3p2\), v < 10.1.0.231\(c185e3r5p1\), v < 10.1.0.231\(c636e3r3p1\) | 10.1.0.230\(c432e9r5p1\), 10.1.0.231\(c10e3r3p2\), 10.1.0.231\(c185e3r5p1\), 10.1.0.231\(c636e3r3p1\) |
| huawei honor_view_20_firmware | v < 10.1.0.212\(c432e10r3p4\), v < 10.1.0.213\(c636e3r4p3\), v < 10.1.0.214\(c10e5r4p3\), v < 10.1.0.214\(c185e3r3p3\) | 10.1.0.212\(c432e10r3p4\), 10.1.0.213\(c636e3r4p3\), 10.1.0.214\(c10e5r4p3\), 10.1.0.214\(c185e3r3p3\) |
| huawei oxfords-an00a_firmware | v < 10.1.0.212\(c00e210r5p1\) | 10.1.0.212\(c00e210r5p1\) |
| huawei princeton-al10b_firmware | v < 10.1.0.160\(c00e160r2p11\) | 10.1.0.160\(c00e160r2p11\) |
| huawei princeton-al10d_firmware | v < 10.1.0.160\(c00e160r2p11\) | 10.1.0.160\(c00e160r2p11\) |
| huawei princeton-tl10c_firmware | v < 10.1.0.160\(c01e160r2p11\) | 10.1.0.160\(c01e160r2p11\) |
| huawei tony-al00b_firmware | v < 10.1.0.160\(c00e160r2p11\) | 10.1.0.160\(c00e160r2p11\) |
| huawei yale-al00a_firmware | v < 10.1.0.160\(c00e160r8p12\) | 10.1.0.160\(c00e160r8p12\) |
| huawei yale-l21a_firmware | v < 10.1.0.230\(c432e9r5p1\), v < 10.1.0.231\(c10e3r3p2\), v < 10.1.0.231\(c636e3r3p1\) | 10.1.0.230\(c432e9r5p1\), 10.1.0.231\(c10e3r3p2\), 10.1.0.231\(c636e3r3p1\) |
| huawei yale-l61a_firmware | v < 10.1.0.225\(c431e3r1p2\), v < 10.1.0.225\(c432e3r1p2\) | 10.1.0.225\(c431e3r1p2\), 10.1.0.225\(c432e3r1p2\) |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.