CVE-2020-9073

Huawei P20 smartphones with versions earlier than 10.0.0.156(C00E156R1P4) have an improper authentication vulnerability. The vulnerability is due to that when an user wants to do certain operation, the software insufficiently validate the user's identity. Attackers need to physically access the smartphone to exploit this vulnerability. Successful exploit could allow the attacker to bypass the limit of student mode function.

• CWE-287

• https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200513-01-smartphone-enVendor Advisory
• https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200513-01-smartphone-enVendor Advisory

Published

May 15, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-9067There is a buffer overflow vulnerability in some Huawei prod…8
• CVE-2020-9068Huawei AR3200 products with versions of V200R007C00SPC900, V…9.8
• CVE-2020-9069There is an information leakage vulnerability in some Huawei…6.5
• CVE-2020-9070Huawei smartphones Taurus-AL00B with versions earlier than 1…5.5
• CVE-2020-9071There is a few bytes out-of-bounds read vulnerability in som…6.5
• CVE-2020-9072Huawei OSD product with versions earlier than OSD_uwp_9.0.32…6.7
• CVE-2020-9074Huawei Smartphones HONOR 20 PRO;Honor View 20;HONOR 20 have …5.3
• CVE-2020-9075Huawei products Secospace USG6300;USG6300E with versions of …6.5
• CVE-2020-9076HUAWEI P30;HUAWEI P30 Pro;Tony-AL00B smartphones with versio…6.8
• CVE-2020-9077HUAWEI P30 smart phones with versions earlier than 10.1.0.16…3.3
• CVE-2020-9078FusionCompute 8.0.0 have local privilege escalation vulnerab…7.8
• CVE-2020-9079FusionSphere OpenStack 8.0.0 have a protection mechanism fai…8.8