VULNERABILITY INTELLIGENCE
CVE-2020-9119
CVSS score6.2 MEDIUM
EPSS probability0.23%
CISA KEVNot currently listed
Published2020-12-24
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:P/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Description
There is a privilege escalation vulnerability on some Huawei smart phones due to design defects. The attacker needs to physically contact the mobile phone and obtain higher privileges, and execute relevant commands, resulting in the user's privilege promotion.
Weakness classification
- nvd@nist.gov: NVD-CWE-noinfo
Primary references
- psirt@huawei.com — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory