VULNERABILITY INTELLIGENCE

CVE-2020-9250

CVSS score3.3 LOW
EPSS probability0.12%
CISA KEVNot currently listed
Published2024-12-20
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

Description

There is an insufficient authentication vulnerability in some Huawei smart phone. An unauthenticated, local attacker can crafts software package to exploit this vulnerability. Due to insufficient verification, successful exploitation may impact the service. (Vulnerability ID: HWPSIRT-2019-12302) This vulnerability has been assigned a Common Vulnerabilities and Exposures (CVE) ID: CVE-2020-9250.

Weakness classification

  • CWE-287: Improper Authentication
  • CWE-522: Insufficiently Protected Credentials

Primary references