CVE-2020-9239
Description
Huawei smartphones BLA-A09 versions 8.0.0.123(C212),versions earlier than 8.0.0.123(C567),versions earlier than 8.0.0.123(C797);BLA-TL00B versions earlier than 8.1.0.326(C01);Berkeley-L09 versions earlier than 8.0.0.163(C10),versions earlier than 8.0.0.163(C432),Versions earlier than 8.0.0.163(C636),Versions earlier than 8.0.0.172(C10);Duke-L09 versions Duke-L09C10B187, versions Duke-L09C432B189, versions Duke-L09C636B189;HUAWEI P20 versions earlier than 8.0.1.16(C00);HUAWEI P20 Pro versions earlier than 8.1.0.152(C00);Jimmy-AL00A versions earlier than Jimmy-AL00AC00B172;LON-L29D versions LON-L29DC721B192;NEO-AL00D versions earlier than 8.1.0.172(C786);Stanford-AL00 versions Stanford-AL00C00B123;Toronto-AL00 versions earlier than Toronto-AL00AC00B225;Toronto-AL00A versions earlier than Toronto-AL00AC00B225;Toronto-TL10 versions earlier than Toronto-TL10C01B225 have an information vulnerability. A module has a design error that is lack of control of input. Attackers can exploit this vulnerab
How to fix
- huawei bla-a09_firmware8.0.0.123\(c567\), 8.0.0.123\(c797\) or later
- huawei bla-tl00b_firmware8.1.0.326\(c01\) or later
- huawei berkeley-l09_firmware8.0.0.163\(c10\), 8.0.0.163\(c636\), 8.0.0.172\(c10\) or later
- huawei p20_firmware8.0.1.16\(c00\) or later
- huawei p20_pro_firmware8.1.0.152\(c00\) or later
- huawei jimmy-al00a_firmwarejimmy-al00ac00b172 or later
- huawei neo-al00d_firmware8.1.0.172\(c786\) or later
- huawei toronto-al00_firmwaretoronto-al00ac00b225 or later
- huawei toronto-al00a_firmwaretoronto-al00ac00b225 or later
- huawei toronto-tl10_firmwaretoronto-tl10c01b225 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| huawei bla-a09_firmware | 8.0.0.123\(c212\), v < 8.0.0.123\(c567\), v < 8.0.0.123\(c797\) | 8.0.0.123\(c567\), 8.0.0.123\(c797\) |
| huawei bla-tl00b_firmware | v < 8.1.0.326\(c01\) | 8.1.0.326\(c01\) |
| huawei berkeley-l09_firmware | v < 8.0.0.163\(c10\), v ≤ 8.0.0.163\(c432\), v < 8.0.0.163\(c636\), v < 8.0.0.172\(c10\) | 8.0.0.163\(c10\), 8.0.0.163\(c636\), 8.0.0.172\(c10\) |
| huawei duke-l09_firmware | duke-l09c10b187, duke-l09c432b189, duke-l09c636b189 | — |
| huawei p20_firmware | v < 8.0.1.16\(c00\) | 8.0.1.16\(c00\) |
| huawei p20_pro_firmware | v < 8.1.0.152\(c00\) | 8.1.0.152\(c00\) |
| huawei jimmy-al00a_firmware | v < jimmy-al00ac00b172 | jimmy-al00ac00b172 |
| huawei lon-l29d_firmware | lon-l29dc721b192 | — |
| huawei neo-al00d_firmware | v < 8.1.0.172\(c786\) | 8.1.0.172\(c786\) |
| huawei stanford-al00_firmware | stanford-al00c00b123 | — |
| huawei toronto-al00_firmware | v < toronto-al00ac00b225 | toronto-al00ac00b225 |
| huawei toronto-al00a_firmware | v < toronto-al00ac00b225 | toronto-al00ac00b225 |
| huawei toronto-tl10_firmware | v < toronto-tl10c01b225 | toronto-tl10c01b225 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.