CVE-2020-9081
low-risk
Published 2024-12-27
There is an improper authorization vulnerability in some Huawei smartphones. An attacker could perform a series of operation in specific mode to exploit this vulnerability. Successful exploit could allow the attacker to bypass app lock. (Vulnerability ID: HWPSIRT-2019-12144) This vulnerability has been assigned a Common Vulnerabilities and Exposures (CVE) ID: CVE-2020-9081.
Do I need to act?
-
0.01% chance of exploitation
EPSS score — low exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
3
CVSS 3.5/10
Low
PHYSICAL
/ LOW complexity
Affected Products (7)
Princeton-Al10D Firmware
Yale-Al50A Firmware
Yalep-Al10B Firmware
Affected Vendors
References (1)
27
/ 100
low-risk
Severity
13/34 · Low
Exploitability
0/34 · Minimal
Exposure
14/34 · Moderate