CVE-2020-9066

Huawei smartphones OxfordP-AN10B with versions earlier than 10.0.1.169(C00E166R4P1) have an improper authentication vulnerability. The Application doesn't perform proper authentication when user performs certain operations. An attacker can trick user into installing a malicious plug-in to exploit this vulnerability. Successful exploit could allow the attacker to bypass the authentication to perform unauthorized operations.

• CWE-287

• https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200325-01-phoneVendor Advisory
• https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200325-01-phoneVendor Advisory

Published

Mar 26, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-9060Z-Wave devices based on Silicon Labs 500 series chipsets usi…6.5
• CVE-2020-9061Z-Wave devices using Silicon Labs 500 and 700 series chipset…6.5
• CVE-2020-9062Diebold Nixdorf ProCash 2100xe USB ATMs running Wincor Proba…5.3
• CVE-2020-9063NCR SelfServ ATMs running APTRA XFS 05.01.00 or earlier do n…7.6
• CVE-2020-9064Huawei smartphone Honor V30 with versions earlier than Oxfor…5.5
• CVE-2020-9065Huawei smart phone Taurus-AL00B with versions earlier than 1…5.5
• CVE-2020-9067There is a buffer overflow vulnerability in some Huawei prod…8
• CVE-2020-9068Huawei AR3200 products with versions of V200R007C00SPC900, V…9.8
• CVE-2020-9069There is an information leakage vulnerability in some Huawei…6.5
• CVE-2020-9070Huawei smartphones Taurus-AL00B with versions earlier than 1…5.5
• CVE-2020-9071There is a few bytes out-of-bounds read vulnerability in som…6.5
• CVE-2020-9072Huawei OSD product with versions earlier than OSD_uwp_9.0.32…6.7