CVE-2020-1831
Last modified
CVE-2020-1831 is a low-severity vulnerability rated 2.4/10 on the CVSS scale. HUAWEI Mate 20 smartphones with versions earlier than 10.0.0.195(SP31C00E74R3P8) have an improper authorization vulnerability. The digital balance function does not sufficiently restrict the using time of certain user, successful exploit could allow the user break the limit of digital balance function after a series of operations with a PC.. EPSS estimates a 0.20% chance of exploitation in the next 30 days.
Description
HUAWEI Mate 20 smartphones with versions earlier than 10.0.0.195(SP31C00E74R3P8) have an improper authorization vulnerability. The digital balance function does not sufficiently restrict the using time of certain user, successful exploit could allow the user break the limit of digital balance function after a series of operations with a PC.
Metrics
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Huawei | Mate 20 Firmware | < 10.0.0.195\(sp31c00e74r3p8\) |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2020-1831?
How severe is CVE-2020-1831?
How do I fix CVE-2020-1831?
How Strix Helps
- Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2020
- CVE-2020-1828Huawei NIP6800 versions V500R001C30, V500R001C60SPC500, and …7.5
- CVE-2020-18280Cross Site Scripting vulnerability found in Phodal CMD v.1.0…6.1
- CVE-2020-18282Cross-site scripting (XSS) vulnerability in NoneCms 1.3.0 al…6.1
- CVE-2020-1829Huawei NIP6800 versions V500R001C30 and V500R001C60SPC500; a…7.5
- CVE-2020-1830Huawei NIP6800 versions V500R001C30, V500R001C60SPC500, and …5.3
- CVE-2020-18305Extreme Networks EXOS before v.22.7 and before v.30.2 was di…8
- CVE-2020-1832E6878-370 products with versions of 10.0.3.1(H557SP27C233) a…8.8
- CVE-2020-18324Cross Site Scripting (XSS) vulnerability exists in Subrion C…6.1
- CVE-2020-18325Multilple Cross Site Scripting (XSS) vulnerability exists in…6.1
- CVE-2020-18326Cross Site Request Forgery (CSRF) vulnerability exists in In…8.8
- CVE-2020-18327Cross Site Scripting (XSS) vulnerability exists in Alfresco …6.1
- CVE-2020-18329An issue was discovered in Rehau devices that use a pCOWeb c…7.5
Are you affected by CVE-2020-1831?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST