Improper authentication in Huawei Honor 9X
Priority LOW 12CWE-287Published · Updated
Key facts
- Attack vector
- Physical
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Security bypass
- Confidentiality · integrity · availability
- Low · None · None
- Fix status
- Fixed
Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-287.
Summary
Honor 9X smartphones with versions earlier than 9.1.1.172(C00E170R8P1) have an improper authentication vulnerability. A logic error occurs when handling clock function, an attacker should do a series of crafted operations quickly before the phone is unlocked, successful exploit could allow the attacker to access clock information without unlock the phone.
Why it matters now
EPSS 0.00246 16th percentileScored 2026-11-07
Fix Fixed Honor 9X (Huawei): 9.1.1.172(C00E170R8P1)
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Huawei | Honor 9X | before 9.1.1.172(C00E170R8P1) | 9.1.1.172(C00E170R8P1) | Patch available | CNA |
- Honor 9X VendorHuawei Affected before 9.1.1.172(C00E170R8P1) Fixed in 9.1.1.172(C00E170R8P1) Patch available CNA
Remediation
- Fix · CNA Honor 9X (Huawei) Fixed in 9.1.1.172(C00E170R8P1)
Timeline
- 2026-10-02 Threatist record created from CVE-2020-1833
- 2026-10-03 Alias added: GHSA-fhq2-85vv-r2h7
References
Sources
- CVE-2020-1833 · CVE Program
- CVE-2020-1833 · NVD
- FIRST EPSS
- GHSA-fhq2-85vv-r2h7 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences