187
VMScore

CVE-2020-1798

Published: 29/05/2020 Updated: 29/05/2020
CVSS v2 Base Score: 2.1 | Impact Score: 2.9 | Exploitability Score: 3.9
CVSS v3 Base Score: 4.6 | Impact Score: 3.6 | Exploitability Score: 0.9
VMScore: 187
Vector: AV:L/AC:L/Au:N/C:N/I:P/A:N

Vulnerability Summary

HUAWEI P30 smartphones with versions earlier than 10.1.0.135(C00E135R2P11) have an improper authentication vulnerability. A logic error occurs when handling NFC work, an attacker should establish a NFC connection to the target phone, and then do a series of operations on the target phone. Successful exploit could allow a guest user do certain operation which is beyond the guest user's privilege.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

huawei p30_firmware

Vendor Advisories

There is an improper authentication vulnerability in several smartphones A logic error occurs when handling NFC work, an attacker should establish a NFC connection to the target phone, and then do a series of operations on the target phone Successful exploit could allow a guest user do certain operation which is beyond the guest user's privilege ...