{"id":"CVE-2020-9081","aliases":["EUVD-2020-29910","GHSA-hc6q-5pvq-h8ff"],"status":"published","title":"There is an improper authorization vulnerability in some Huawei smartphones. An attacker could...","description":"There is an improper authorization vulnerability in some Huawei smartphones. An attacker could perform a series of operation in specific mode to exploit this vulnerability. Successful exploit could allow the attacker to bypass app lock. (Vulnerability ID: HWPSIRT-2019-12144)\n\n\n\nThis vulnerability has been assigned a Common Vulnerabilities and Exposures (CVE) ID: CVE-2020-9081.","severity":{"version":"3.1","score":3.5,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","level":"low","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00202,"percentile":0.10236,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-285","CWE-863"],"published":"2024-12-27T09:34:40Z","modified":"2026-06-17T03:27:27Z","products":[{"vendor":"huawei","product":"huawei mate 20"},{"vendor":"huawei","product":"huawei p30"},{"vendor":"huawei","product":"huawei p30 pro"},{"vendor":"huawei","product":"mate_20_firmware"},{"vendor":"huawei","product":"p30_firmware"},{"vendor":"huawei","product":"p30_pro_firmware"},{"vendor":"huawei","product":"princeton-al10d"},{"vendor":"huawei","product":"princeton-al10d_firmware"},{"vendor":"huawei","product":"yale-al00a"},{"vendor":"huawei","product":"yale-al00a_firmware"},{"vendor":"huawei","product":"yale-al50a"},{"vendor":"huawei","product":"yale-al50a_firmware"},{"vendor":"huawei","product":"yalep-al10b"},{"vendor":"huawei","product":"yalep-al10b_firmware"}],"references":[{"url":"https://www.huawei.com/en/psirt/security-advisories/2020/huawei-sa-20200826-15-smartphone-en","tags":["Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-9081"},{"url":"https://github.com/advisories/GHSA-hc6q-5pvq-h8ff"}],"sources":{"cve":[{"id":"CVE-2020-9081","description":"There is an improper authorization vulnerability in some Huawei smartphones. An attacker could perform a series of operation in specific mode to exploit this vulnerability. Successful exploit could allow the attacker to bypass app lock. (Vulnerability ID: HWPSIRT-2019-12144)\n\n\n\nThis vulnerability has been assigned a Common Vulnerabilities and Exposures (CVE) ID: CVE-2020-9081.","status":"published","published":"2024-12-27T09:34:40.332Z","modified":"2024-12-27T16:08:00.642Z","cvss":[{"version":"3.1","score":3.5,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","level":"low","assessor":"cna"}],"cwes":["CWE-285"],"updated_at":"2026-11-02T14:35:49.538427Z"}],"euvd":[{"id":"EUVD-2020-29910","description":"There is an improper authorization vulnerability in some Huawei smartphones. An attacker could perform a series of operation in specific mode to exploit this vulnerability. Successful exploit could allow the attacker to bypass app lock. (Vulnerability ID: HWPSIRT-2019-12144)\n\n\n\nThis vulnerability has been assigned a Common Vulnerabilities and Exposures (CVE) ID: CVE-2020-9081.","status":"published","published":"2024-12-27T09:34:40Z","modified":"2024-12-27T16:08:00Z","cvss":[{"version":"3.1","score":3.5,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","level":"low"}],"updated_at":"2026-11-03T00:04:32.701542Z"}],"ghsa":[{"id":"GHSA-hc6q-5pvq-h8ff","title":"There is an improper authorization vulnerability in some Huawei smartphones. An attacker could...","description":"There is an improper authorization vulnerability in some Huawei smartphones. An attacker could perform a series of operation in specific mode to exploit this vulnerability. Successful exploit could allow the attacker to bypass app lock. (Vulnerability ID: HWPSIRT-2019-12144)\n\n\n\nThis vulnerability has been assigned a Common Vulnerabilities and Exposures (CVE) ID: CVE-2020-9081.","status":"published","published":"2024-12-27T12:30:35Z","modified":"2025-01-10T21:32:34Z","cvss":[{"version":"3.1","score":3.5,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","level":"low"}],"cwes":["CWE-285","CWE-863"],"updated_at":"2026-11-02T14:59:27.888313Z"}],"nvd":[{"id":"CVE-2020-9081","description":"There is an improper authorization vulnerability in some Huawei smartphones. An attacker could perform a series of operation in specific mode to exploit this vulnerability. Successful exploit could allow the attacker to bypass app lock. (Vulnerability ID: HWPSIRT-2019-12144)\n\n\n\nThis vulnerability has been assigned a Common Vulnerabilities and Exposures (CVE) ID: CVE-2020-9081.","status":"published","published":"2024-12-27T10:15:10.937Z","modified":"2026-06-17T03:27:27.987Z","cvss":[{"version":"3.1","score":3.5,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","level":"low","assessor":"secondary"},{"version":"3.1","score":6.8,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"medium","assessor":"primary"}],"cwes":["CWE-285","CWE-863"],"updated_at":"2026-11-02T14:06:48.591569Z"}]}}