CVE-2020-9244

Severity: medium (CVSS 6.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2020-08-11 · updated 2026-06-17

Description

HUAWEI Mate 20 versions Versions earlier than 10.1.0.160(C00E160R3P8);HUAWEI Mate 20 Pro versions Versions earlier than 10.1.0.270(C431E7R1P5),Versions earlier than 10.1.0.270(C635E3R1P5),Versions earlier than 10.1.0.273(C636E7R2P4);HUAWEI Mate 20 X versions Versions earlier than 10.1.0.160(C00E160R2P8);HUAWEI P30 versions Versions earlier than 10.1.0.160(C00E160R2P11);HUAWEI P30 Pro versions Versions earlier than 10.1.0.160(C00E160R2P8);HUAWEI Mate 20 RS versions Versions earlier than 10.1.0.160(C786E160R3P8);HonorMagic2 versions Versions earlier than 10.0.0.187(C00E61R2P11);Honor20 versions Versions earlier than 10.0.0.175(C00E58R4P11);Honor20 PRO versions Versions earlier than 10.0.0.194(C00E62R8P12);HonorMagic2 versions Versions earlier than 10.0.0.187(C00E61R2P11);HonorV20 versions Versions earlier than 10.0.0.188(C00E62R2P11) have an improper authentication vulnerability. The system does not properly sign certain encrypted file, the attacker should gain the key used to encrypt the file, successful exploit could cause certain file be forged

Affected products

Huawei Honor 20 Firmware: before 10.0.0.175\(c00e58r4p11\) — fixed in 10.0.0.175\(c00e58r4p11\)
Huawei Honor 20 Pro Firmware: before 10.0.0.194\(c00e62r8p12\) — fixed in 10.0.0.194\(c00e62r8p12\)
Honor Magic 2: before 10.0.0.187\(c00e61r2p11\) — fixed in 10.0.0.187\(c00e61r2p11\)
Huawei Honor V20: before 10.0.0.188\(c00e62r2p11\) — fixed in 10.0.0.188\(c00e62r2p11\)
HUAWEI Mate 20: before 10.1.0.160\(c00e160r3p8\) — fixed in 10.1.0.160\(c00e160r3p8\)
HUAWEI Mate 20 Pro: before 10.1.0.270\(c431e7r1p5\); before 10.1.0.270\(c635e3r1p5\); before 10.1.0.273\(c636e7r2p4\) — fixed in 10.1.0.270\(c431e7r1p5\), 10.1.0.270\(c635e3r1p5\), 10.1.0.273\(c636e7r2p4\)
Mate 20 RS: before 10.1.0.160\(c786e160r3p8\) — fixed in 10.1.0.160\(c786e160r3p8\)
Huawei Mate 20 X: before 10.1.0.160\(c00e160r2p8\) — fixed in 10.1.0.160\(c00e160r2p8\)
HUAWEI P30: before 10.1.0.160\(c00e160r2p11\) — fixed in 10.1.0.160\(c00e160r2p11\)
HUAWEI P30 Pro: before 10.1.0.160\(c00e160r2p8\) — fixed in 10.1.0.160\(c00e160r2p8\)

How to fix

Upgrade to a fixed version: Huawei Honor 20 Firmware 10.0.0.175\(c00e58r4p11\); Huawei Honor 20 Pro Firmware 10.0.0.194\(c00e62r8p12\); Honor Magic 2 10.0.0.187\(c00e61r2p11\); Huawei Honor V20 10.0.0.188\(c00e62r2p11\); HUAWEI Mate 20 10.1.0.160\(c00e160r3p8\); HUAWEI Mate 20 Pro 10.1.0.270\(c431e7r1p5\), 10.1.0.270\(c635e3r1p5\), 10.1.0.273\(c636e7r2p4\); Mate 20 RS 10.1.0.160\(c786e160r3p8\); Huawei Mate 20 X 10.1.0.160\(c00e160r2p8\); HUAWEI P30 10.1.0.160\(c00e160r2p11\); HUAWEI P30 Pro 10.1.0.160\(c00e160r2p8\). Check the vendor advisory for mitigations.

References

Get alerted when CVE-2020-9244 or the next vulnerability affects your stack