CVE-2020-9244
Description
HUAWEI Mate 20 versions Versions earlier than 10.1.0.160(C00E160R3P8);HUAWEI Mate 20 Pro versions Versions earlier than 10.1.0.270(C431E7R1P5),Versions earlier than 10.1.0.270(C635E3R1P5),Versions earlier than 10.1.0.273(C636E7R2P4);HUAWEI Mate 20 X versions Versions earlier than 10.1.0.160(C00E160R2P8);HUAWEI P30 versions Versions earlier than 10.1.0.160(C00E160R2P11);HUAWEI P30 Pro versions Versions earlier than 10.1.0.160(C00E160R2P8);HUAWEI Mate 20 RS versions Versions earlier than 10.1.0.160(C786E160R3P8);HonorMagic2 versions Versions earlier than 10.0.0.187(C00E61R2P11);Honor20 versions Versions earlier than 10.0.0.175(C00E58R4P11);Honor20 PRO versions Versions earlier than 10.0.0.194(C00E62R8P12);HonorMagic2 versions Versions earlier than 10.0.0.187(C00E61R2P11);HonorV20 versions Versions earlier than 10.0.0.188(C00E62R2P11) have an improper authentication vulnerability. The system does not properly sign certain encrypted file, the attacker should gain the key used to encrypt the file, successful exploit could cause certain file be forged
How to fix
- huawei mate_20_firmware10.1.0.160\(c00e160r3p8\) or later
- huawei mate_20_pro_firmware10.1.0.270\(c431e7r1p5\), 10.1.0.270\(c635e3r1p5\), 10.1.0.273\(c636e7r2p4\) or later
- huawei mate_20_x_firmware10.1.0.160\(c00e160r2p8\) or later
- huawei p30_firmware10.1.0.160\(c00e160r2p11\) or later
- huawei p30_pro_firmware10.1.0.160\(c00e160r2p8\) or later
- huawei mate_20_rs_firmware10.1.0.160\(c786e160r3p8\) or later
- huawei honor_magic_2_firmware10.0.0.187\(c00e61r2p11\) or later
- huawei honor_20_firmware10.0.0.175\(c00e58r4p11\) or later
- huawei honor_20_pro_firmware10.0.0.194\(c00e62r8p12\) or later
- huawei honor_v20_firmware10.0.0.188\(c00e62r2p11\) or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| huawei mate_20_firmware | v < 10.1.0.160\(c00e160r3p8\) | 10.1.0.160\(c00e160r3p8\) |
| huawei mate_20_pro_firmware | v < 10.1.0.270\(c431e7r1p5\), v < 10.1.0.270\(c635e3r1p5\), v < 10.1.0.273\(c636e7r2p4\) | 10.1.0.270\(c431e7r1p5\), 10.1.0.270\(c635e3r1p5\), 10.1.0.273\(c636e7r2p4\) |
| huawei mate_20_x_firmware | v < 10.1.0.160\(c00e160r2p8\) | 10.1.0.160\(c00e160r2p8\) |
| huawei p30_firmware | v < 10.1.0.160\(c00e160r2p11\) | 10.1.0.160\(c00e160r2p11\) |
| huawei p30_pro_firmware | v < 10.1.0.160\(c00e160r2p8\) | 10.1.0.160\(c00e160r2p8\) |
| huawei mate_20_rs_firmware | v < 10.1.0.160\(c786e160r3p8\) | 10.1.0.160\(c786e160r3p8\) |
| huawei honor_magic_2_firmware | v < 10.0.0.187\(c00e61r2p11\) | 10.0.0.187\(c00e61r2p11\) |
| huawei honor_20_firmware | v < 10.0.0.175\(c00e58r4p11\) | 10.0.0.175\(c00e58r4p11\) |
| huawei honor_20_pro_firmware | v < 10.0.0.194\(c00e62r8p12\) | 10.0.0.194\(c00e62r8p12\) |
| huawei honor_v20_firmware | v < 10.0.0.188\(c00e62r2p11\) | 10.0.0.188\(c00e62r2p11\) |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.