mate_20_pro_firmware Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/mate_20_pro_firmware/ Sun, 26 Feb 2023 06:38:33 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png mate_20_pro_firmware Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/mate_20_pro_firmware/ 32 32 CVE-2020-1786 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-1786/ Sun, 26 Feb 2023 06:38:33 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-1786/ HUAWEI Mate 20 Pro smartphones versions earlier than 10.0.0.175(C00E69R3P8) have an improper authentication vulnerability. The software does not sufficiently validate the name of apk file in a special condition which could allow an attacker to forge a crafted application as a normal one. Successful exploit could allow the attacker to bypass digital balance function.

The post CVE-2020-1786 appeared first on CVE Vulnerability.

]]> HUAWEI Mate 20 Pro smartphones versions earlier than 10.0.0.175(C00E69R3P8) have an improper authentication vulnerability. The software does not sufficiently validate the name of apk file in a special condition which could allow an attacker to forge a crafted application as a normal one. Successful exploit could allow the attacker to bypass digital balance function.

The post CVE-2020-1786 appeared first on CVE Vulnerability.

]]> CVE-2019-5250 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-5250/ Sun, 26 Feb 2023 06:33:35 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-5250/ Mate 20 Pro smartphones with versions earlier than 9.1.0.135(C00E133R3P1) have an improper authorization vulnerability. The software does not properly restrict certain operation of certain privilege, the attacker could trick the user into installing a malicious application before the user turns on student mode function. Successful exploit could allow the attacker to bypass the limit of […]

The post CVE-2019-5250 appeared first on CVE Vulnerability.

]]> Mate 20 Pro smartphones with versions earlier than 9.1.0.135(C00E133R3P1) have an improper authorization vulnerability. The software does not properly restrict certain operation of certain privilege, the attacker could trick the user into installing a malicious application before the user turns on student mode function. Successful exploit could allow the attacker to bypass the limit of student mode function.

The post CVE-2019-5250 appeared first on CVE Vulnerability.

]]> CVE-2021-22440 https://cvevulnerability.com/cve_vulnerabilities/cve-2021-22440/ Thu, 23 Feb 2023 14:07:18 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2021-22440/ There is a path traversal vulnerability in some Huawei products. The vulnerability is due to that the software uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the software does not properly validate the pathname. Successful exploit could allow […]

The post CVE-2021-22440 appeared first on CVE Vulnerability.

]]> There is a path traversal vulnerability in some Huawei products. The vulnerability is due to that the software uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the software does not properly validate the pathname. Successful exploit could allow the attacker to access a location that is outside of the restricted directory by a crafted filename. Affected product versions include:HUAWEI Mate 20 9.0.0.195(C01E195R2P1), 9.1.0.139(C00E133R3P1);HUAWEI Mate 20 Pro 9.0.0.187(C432E10R1P16), 9.0.0.188(C185E10R2P1), 9.0.0.245(C10E10R2P1), 9.0.0.266(C432E10R1P16), 9.0.0.267(C636E10R2P1), 9.0.0.268(C635E12R1P16), 9.0.0.278(C185E10R2P1); Hima-L29C 9.0.0.105(C10E9R1P16), 9.0.0.105(C185E9R1P16), 9.0.0.105(C636E9R1P16); Laya-AL00EP 9.1.0.139(C786E133R3P1); OxfordS-AN00A 10.1.0.223(C00E210R5P1); Tony-AL00B 9.1.0.257(C00E222R2P1).

The post CVE-2021-22440 appeared first on CVE Vulnerability.

]]>