CVE-2020-1872

Severity: medium (CVSS 4.6 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2020-02-18 · updated 2026-06-17

Description

Huawei smart phones P10 Plus with versions earlier than 9.1.0.201(C01E75R1P12T8), earlier than 9.1.0.252(C185E2R1P9T8), earlier than 9.1.0.252(C432E4R1P9T8), and earlier than 9.1.0.255(C576E6R1P8T8) have a digital balance bypass vulnerability. When re-configuring the mobile phone at the digital balance mode, an attacker can perform some operations to bypass the startup wizard, and then open some switch. As a result, the digital balance function is bypassed.

Affected products

Huawei Technologies Co., Ltd. P10 Plus: before 9.1.0.201\(c01e75r1p12t8\); before 9.1.0.252\(c185e2r1p9t8\); before 9.1.0.252\(c432e4r1p9t8\); before 9.1.0.255\(c576e6r1p8t8\) — fixed in 9.1.0.201\(c01e75r1p12t8\), 9.1.0.252\(c185e2r1p9t8\), 9.1.0.252\(c432e4r1p9t8\), 9.1.0.255\(c576e6r1p8t8\)

How to fix

Upgrade to a fixed version: Huawei Technologies Co., Ltd. P10 Plus 9.1.0.201\(c01e75r1p12t8\), 9.1.0.252\(c185e2r1p9t8\), 9.1.0.252\(c432e4r1p9t8\), 9.1.0.255\(c576e6r1p8t8\). Check the vendor advisory for mitigations.

References

Get alerted when CVE-2020-1872 or the next vulnerability affects your stack