vulntracker.iovulntracker.io
© 2026 vulntracker.io

CVE-2020-9235

MEDIUM
5.5
CVSS Score
Published: September 3, 2020 at 06:04 PM UTC
Updated: June 17, 2026 at 03:27 AM UTC
20 products affected across 1 vendorHonor View 20 FirmwareTony AL00B FirmwareHonor 20 Pro Firmware

Using HONOR 20 PRO;Honor View 20;OxfordS-AN00A;Princeton-AL10B;Princeton-AL10D;Princeton-TL10C;Tony-AL00B;Yale-AL00A;Yale-L21A;Yale-L61A by N/A?

Get instant alerts when new vulnerabilities affect HONOR 20 PRO;Honor View 20;OxfordS-AN00A;Princeton-AL10B;Princeton-AL10D;Princeton-TL10C;Tony-AL00B;Yale-AL00A;Yale-L21A;Yale-L61A - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Start FreeSign In
Severity
MEDIUM5.5
Exploit prediction
EPSS 0.2%

Description

Huawei smartphones HONOR 20 PRO Versions earlier than 10.1.0.230(C432E9R5P1),Versions earlier than 10.1.0.231(C10E3R3P2),Versions earlier than 10.1.0.231(C185E3R5P1),Versions earlier than 10.1.0.231(C636E3R3P1);Versions earlier than 10.1.0.212(C432E10R3P4),Versions earlier than 10.1.0.213(C636E3R4P3),Versions earlier than 10.1.0.214(C10E5R4P3),Versions earlier than 10.1.0.214(C185E3R3P3);Versions earlier than 10.1.0.212(C00E210R5P1);Versions earlier than 10.1.0.160(C00E160R2P11);Versions earlier than 10.1.0.160(C00E160R2P11);Versions earlier than 10.1.0.160(C01E160R2P11);Versions earlier than 10.1.0.160(C00E160R2P11);Versions earlier than 10.1.0.160(C00E160R8P12);Versions earlier than 10.1.0.230(C432E9R5P1),Versions earlier than 10.1.0.231(C10E3R3P2),Versions earlier than 10.1.0.231(C636E3R3P1);Versions earlier than 10.1.0.225(C431E3R1P2),Versions earlier than 10.1.0.225(C432E3R1P2) contain an information vulnerability. A module has a design error that is lack of control of input. Attackers can exploit this vulnerability to obtain some information. This can lead to information leak.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Honor 20 Pro Firmware· Huawei
95%
v < 10.1.0.230(c432e9r5p1)v < 10.1.0.231(c10e3r3p2)v < 10.1.0.231(c185e3r5p1)v < 10.1.0.231(c636e3r3p1)
Affected range stops below 10.1.0.230(c432e9r5p1), so it looks safe — our inference, not a vendor statement
Affected range stops below 10.1.0.231(c10e3r3p2), so it looks safe — our inference, not a vendor statement
Affected range stops below 10.1.0.231(c185e3r5p1), so it looks safe — our inference, not a vendor statement
Affected range stops below 10.1.0.231(c636e3r3p1), so it looks safe — our inference, not a vendor statement
huawei-honor-20-pro (same device)
Honor View 20 Firmware· Huawei
95%
v < 10.1.0.212(c432e10r3p4)v < 10.1.0.213(c636e3r4p3)v < 10.1.0.214(c10e5r4p3)v < 10.1.0.214(c185e3r3p3)
Affected range stops below 10.1.0.212(c432e10r3p4), so it looks safe — our inference, not a vendor statement
Affected range stops below 10.1.0.213(c636e3r4p3), so it looks safe — our inference, not a vendor statement
Affected range stops below 10.1.0.214(c10e5r4p3), so it looks safe — our inference, not a vendor statement
Affected range stops below 10.1.0.214(c185e3r3p3), so it looks safe — our inference, not a vendor statement
huawei-honor-view-20 (same device)
Oxfords AN00A Firmware· Huawei
95%
v < 10.1.0.212(c00e210r5p1)
Affected range stops below 10.1.0.212(c00e210r5p1), so it looks safe — our inference, not a vendor statement
huawei-oxfords-an00a (same device)
Princeton AL10B Firmware· Huawei
95%
v < 10.1.0.160(c00e160r2p11)
Affected range stops below 10.1.0.160(c00e160r2p11), so it looks safe — our inference, not a vendor statement
huawei-princeton-al10b (same device)
Princeton AL10D Firmware· Huawei
95%
v < 10.1.0.160(c00e160r2p11)
Affected range stops below 10.1.0.160(c00e160r2p11), so it looks safe — our inference, not a vendor statement
huawei-princeton-al10d (same device)
Princeton TL10C Firmware· Huawei
95%
v < 10.1.0.160(c01e160r2p11)
Affected range stops below 10.1.0.160(c01e160r2p11), so it looks safe — our inference, not a vendor statement
huawei-princeton-tl10c (same device)
Tony AL00B Firmware· Huawei
95%
v < 10.1.0.160(c00e160r2p11)
Affected range stops below 10.1.0.160(c00e160r2p11), so it looks safe — our inference, not a vendor statement
huawei-tony-al00b (same device)
Yale AL00A Firmware· Huawei
95%
v < 10.1.0.160(c00e160r8p12)
Affected range stops below 10.1.0.160(c00e160r8p12), so it looks safe — our inference, not a vendor statement
huawei-yale-al00a (same device)
Yale L21A Firmware· Huawei
95%
v < 10.1.0.230(c432e9r5p1)v < 10.1.0.231(c10e3r3p2)v < 10.1.0.231(c636e3r3p1)
Affected range stops below 10.1.0.230(c432e9r5p1), so it looks safe — our inference, not a vendor statement
Affected range stops below 10.1.0.231(c10e3r3p2), so it looks safe — our inference, not a vendor statement
Affected range stops below 10.1.0.231(c636e3r3p1), so it looks safe — our inference, not a vendor statement
huawei-yale-l21a (same device)
Yale L61A Firmware· Huawei
95%
v < 10.1.0.225(c431e3r1p2)v < 10.1.0.225(c432e3r1p2)
Affected range stops below 10.1.0.225(c431e3r1p2), so it looks safe — our inference, not a vendor statement
Affected range stops below 10.1.0.225(c432e3r1p2), so it looks safe — our inference, not a vendor statement
huawei-yale-l61a (same device)

Remediation

No guide yet

No remediation guidance has been written for this CVE yet. What the record does show:

Patch and advisory references

References (1)

x_refsource_MISCVendor Advisory
Source: [email protected]
https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200902-07-smartphone-en

CVSS

5.5MEDIUM[email protected]
Attack Vector
LOCAL
Complexity
LOW
Privileges
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
NONE
Availability
NONE
Vector?

Quick Info

StatusMODIFIED
CWE
CWE-20

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create accountSign in
Free plan, no card