CVE-2020-9082
Possible ATT&CK Techniques 3AI
T1055 · Process Injection T1056.004 · Credential API Hooking T1005 · Data from Local SystemGet alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2020-9082
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
There is an information disclosure vulnerability in several smartphones. The system has a logic judging error under certain scenario, the attacker should gain the permit to execute commands in ADB mode and then do a series of operation on the phone. Successful exploit could allow the attacker to gain certain information from certain apps locked by Applock. (Vulnerability ID: HWPSIRT-2019-07112) This vulnerability has been assigned a Common Vulnerabilities and Exposures (CVE) ID: CVE-2020-9082.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
信息暴露
Source: CVE Program / CVE List V5
Vulnerability Title
华为产品安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Huawei Mate 20是中国华为（Huawei）公司的一款智能手机。 华为多个智能手机中存在一个信息泄露漏洞。在某些情况下，系统存在逻辑判断错误，攻击者应获得许可以ADB模式执行命令，然后在电话上进行一系列操作。成功利用该漏洞可能使攻击者从被Applock锁定的某些应用程序中获取某些信息。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Huawei | HUAWEI Mate 20 | Versions earlier than 10.1.0.160(C00) | - |
II. Public POCs for CVE-2020-9082
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2020-9082
请登录查看更多情报信息。
Vendor Advisories for CVE-2020-9082 (1)
Same Patch Batch · Huawei · 2024-12-27 · 13 CVEs total
| CVE-2020-9236 | 8.8 HIGH | Huawei FusionCompute 安全漏洞 |
| CVE-2020-9080 | 7.8 HIGH | 华为产品安全漏洞 |
| CVE-2020-9222 | 7.0 HIGH | 华为 FusionCompute 安全漏洞 |
| CVE-2020-9210 | 6.8 MEDIUM | Huawei Myna 安全漏洞 |
| CVE-2020-9211 | 6.4 MEDIUM | Huawei Mate 30 安全漏洞 |
| CVE-2020-9253 | 6.3 MEDIUM | Huawei Lion-AL00C 安全漏洞 |
| CVE-2020-9085 | 5.3 MEDIUM | Huawei 4G Router B612 安全漏洞 |
| CVE-2020-9086 | 4.3 MEDIUM | Huawei 4G Router B612安全漏洞 |
| CVE-2020-1818 | 3.7 LOW | 华为产品安全漏洞 |
| CVE-2020-1819 | 3.7 LOW | 华为产品安全漏洞 |
| CVE-2020-9081 | 3.5 LOW | 华为产品安全漏洞 |
| CVE-2020-9089 | 3.3 LOW | 华为产品安全漏洞 |
IV. Related Vulnerabilities
Same weakness: CWE-200
- CVE-2026-19837
Webkul Bagisto Customer Search search information disclosure - CVE-2026-66272
Dell Wyse Management Suite 早期版本存在关键功能缺身份验证漏洞致信息泄露 - CVE-2026-72834
filebrowser before 2.63.19 Permission Bypass via checksum - CVE-2026-73304
Budibase: SSO OAuth2 Token Leakage via User Metadata Endpoin - CVE-2026-18068
IBM i is Affected By Multiple Vulnerabilities in Java Secure
V. Comments for CVE-2020-9082
No comments yet