CVE-2020-9253

CVSS 6.3 MEDIUMEPSS 0.2%CWE-121

Vexday Risk Score

13Low

SSVC decision (CISA)

Track

No exploitation signal → monitor

CVSS 6.3EPSS 0.2%KEV nãoPoC —Nuclei —Metasploit —Patch —

Lifecycle

27 Dec 2024Published on NVD

Recommendation: Monitor — no exploitation signal at the moment.

There is a stack overflow vulnerability in some Huawei smart phone. An attacker can craft specific packet to exploit this vulnerability. Due to insufficient verification, this could be exploited to tamper with the information to affect the availability. (Vulnerability ID: HWPSIRT-2019-11030) This vulnerability has been assigned a Common Vulnerabilities and Exposures (CVE) ID: CVE-2020-9253.

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L

Affected products

Huawei · Lion-AL00C

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://www.huawei.com/en/psirt/security-advisories/2020/huawei-sa-20200715-08-smartphone-en