Attacker Value
Unknown
(0 users assessed)
Exploitability
Unknown
(0 users assessed)
User Interaction
Required
Privileges Required
None
Attack Vector
Local
0

CVE-2020-9247

Disclosure Date: December 07, 2020 •
CVE-2020-9247 CVSS v3 Base Score: 7.8
Add MITRE ATT&CK tactics and techniques that apply to this CVE.

Description

There is a buffer overflow vulnerability in several Huawei products. The system does not sufficiently validate certain configuration parameter which is passed from user that would cause buffer overflow. The attacker should trick the user into installing and running a malicious application with a high privilege, successful exploit may cause code execution. Affected product include Huawei HONOR 20 PRO, Mate 20, Mate 20 Pro, Mate 20 X, P30, P30 Pro, Hima-L29C, Laya-AL00EP, Princeton-AL10B, Tony-AL00B, Yale-L61A, Yale-TL00B and YaleP-AL10B.

Add Assessment

No one has assessed this topic. Be the first to add your voice to the community.

CVSS V3 Severity and Metrics
Base Score:
7.8 High
Impact Score:
5.9
Exploitability Score:
1.8
Vector:
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Attack Vector (AV):
Local
Attack Complexity (AC):
Low
Privileges Required (PR):
None
User Interaction (UI):
Required
Scope (S):
Unchanged
Confidentiality (C):
High
Integrity (I):
High
Availability (A):
High

General Information

Offensive Application
Unknown
Utility Class
Unknown
Ports
Unknown
OS
Unknown
Vulnerable Versions
HONOR 20 PRO 10.1.0.230(C432E9R5P1)
HONOR 20 PRO 10.1.0.231(C10E3R3P2)
HUAWEI Mate 20 10.1.0.160(C00E160R3P8)
HUAWEI Mate 20 Pro 10.1.0.270(C432E7R1P5)
HUAWEI Mate 20 Pro 10.1.0.270(C635E3R1P5)
HUAWEI Mate 20 Pro 10.1.0.273(C185E7R2P4)
HUAWEI Mate 20 Pro 10.1.0.273(C636E7R2P4)
HUAWEI Mate 20 Pro 10.1.0.277(C10E7R2P4)
HUAWEI Mate 20 Pro 10.1.0.277(C605E7R1P5)
HUAWEI Mate 20 X 10.1.0.160(C00E160R2P8)
HUAWEI P30 9.1.0.272(C635E4R2P2)
HUAWEI P30 10.1.0.123(C432E22R2P5)
HUAWEI P30 10.1.0.126(C10E7R5P1)
HUAWEI P30 10.1.0.126(C185E4R7P1)
HUAWEI P30 10.1.0.126(C605E19R1P3)
HUAWEI P30 10.1.0.126(C636E5R3P4)
HUAWEI P30 10.1.0.126(C636E7R3P4)
HUAWEI P30 Pro 10.1.0.160(C00E160R2P8)
Hima-L29C 10.1.0.273(C185E5R2P4)
Hima-L29C 10.1.0.273(C636E5R2P4)
Hima-L29C 10.1.0.275(C10E4R2P4)
Laya-AL00EP 10.1.0.160(C786E160R3P8)
Princeton-AL10B 10.1.0.160(C00E160R2P11)
Tony-AL00B 10.1.0.160(C00E160R2P11)
Yale-L61A 10.1.0.225(C432E3R1P2)
Yale-L61A 10.1.0.226(C10E3R1P1)
Yale-TL00B 10.1.0.160(C01E160R8P12)
YaleP-AL10B 10.1.0.160(C00E160R8P12)
Prerequisites
Unknown
Discovered By
Unknown
PoC Author
Unknown
Metasploit Module
Unknown
Reporter
Unknown

Additional Info

Authenticated
Unknown
Exploitable
Unknown
Reliability
Unknown
Stability
Unknown
Available Mitigations
Unknown
Shelf Life
Unknown
Userbase/Installbase
Unknown
Patch Effectiveness
Unknown
Technical Analysis