HUAWEI Mate 20 versions Versions earlier than 10.1.0.160(C00E160R3P8);HUAWEI Mate 20 Pro…
Priority LOW 30Published · Updated
Key facts
- Attack vector
- Physical
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- —
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- Fixed
Attack profile from CVSS 3.1 · NVD. Fix status from CNA.
Summary
HUAWEI Mate 20 versions Versions earlier than 10.1.0.160(C00E160R3P8);HUAWEI Mate 20 Pro versions Versions earlier than 10.1.0.270(C431E7R1P5),Versions earlier than 10.1.0.270(C635E3R1P5),Versions earlier than 10.1.0.273(C636E7R2P4);HUAWEI Mate 20 X versions Versions earlier than 10.1.0.160(C00E160R2P8);HUAWEI P30 versions Versions earlier than 10.1.0.160(C00E160R2P11);HUAWEI P30 Pro versions Versions earlier than 10.1.0.160(C00E160R2P8);HUAWEI Mate 20 RS versions Versions earlier than 10.1.0.160(C786E160R3P8);HonorMagic2 versions Versions earlier than 10.0.0.187(C00E61R2P11);Honor20 versions Versions earlier than 10.0.0.175(C00E58R4P11);Honor20 PRO versions Versions earlier than 10.0.0.194(C00E62R8P12);HonorMagic2 versions Versions earlier than 10.0.0.187(C00E61R2P11);HonorV20 versions Versions earlier than 10.0.0.188(C00E62R2P11) have an improper authentication vulnerability. The system does not properly sign certain encrypted file, the attacker should gain the key used to encrypt the file, successful exploit could cause certain file be forged
Why it matters now
EPSS 0.00233 14th percentileScored 2026-11-07
Fix Fixed HUAWEI Mate 20;HUAWEI Mate 20 Pro;HUAWEI Mate 20 X;HUAWEI P30;HUAWEI P30 Pro;HUAWEI Mate 20 RS;HonorMagic2;Honor20;Honor20 PRO;HonorMagic2;HonorV20: 10.1.0.160(C00E160R3P8), 10.1.0.160(C00E160R2P8), 10.1.0.160(C00E160R2P11) +5
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | HUAWEI Mate 20;HUAWEI Mate 20 Pro;HUAWEI Mate 20 X;HUAWEI P30;HUAWEI P30 Pro;HUAWEI Mate 20 RS;HonorMagic2;Honor20;Honor20 PRO;HonorMagic2;HonorV20 | before 10.1.0.160(C00E160R3P8); Versions earlier than 10.1.0.270(C431E7R1P5),Versions earlier than 10.1.0.270(C635E3R1P5),Versions earlier than 10.1.0.273(C636E7R2P4); before 10.1.0.160(C00E160R2P8); before 10.1.0.160(C00E160R2P11); before 10.1.0.160(C786E160R3P8); before 10.0.0.187(C00E61R2P11); before 10.0.0.175(C00E58R4P11); before 10.0.0.194(C00E62R8P12); before 10.0.0.188(C00E62R2P11) | 10.1.0.160(C00E160R3P8), 10.1.0.160(C00E160R2P8), 10.1.0.160(C00E160R2P11), 10.1.0.160(C786E160R3P8), 10.0.0.187(C00E61R2P11), 10.0.0.175(C00E58R4P11), 10.0.0.194(C00E62R8P12), 10.0.0.188(C00E62R2P11) | Patch available | CNA |
- HUAWEI Mate 20;HUAWEI Mate 20 Pro;HUAWEI Mate 20 X;HUAWEI P30;HUAWEI P30 Pro;HUAWEI Mate 20 RS;HonorMagic2;Honor20;Honor20 PRO;HonorMagic2;HonorV20 Vendor— Affected before 10.1.0.160(C00E160R3P8); Versions earlier than 10.1.0.270(C431E7R1P5),Versions earlier than 10.1.0.270(C635E3R1P5),Versions earlier than 10.1.0.273(C636E7R2P4); before 10.1.0.160(C00E160R2P8); before 10.1.0.160(C00E160R2P11); before 10.1.0.160(C786E160R3P8); before 10.0.0.187(C00E61R2P11); before 10.0.0.175(C00E58R4P11); before 10.0.0.194(C00E62R8P12); before 10.0.0.188(C00E62R2P11) Fixed in 10.1.0.160(C00E160R3P8), 10.1.0.160(C00E160R2P8), 10.1.0.160(C00E160R2P11), 10.1.0.160(C786E160R3P8), 10.0.0.187(C00E61R2P11), 10.0.0.175(C00E58R4P11), 10.0.0.194(C00E62R8P12), 10.0.0.188(C00E62R2P11) Patch available CNA
CPE configurations NVD · 21
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:huawei:mate_20_firmware:*:*:*:*:*:*:*:* | before 10.1.0.160\(c00e160r3p8\) | Vulnerable | Huawei |
| cpe:2.3:h:huawei:mate_20:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Huawei |
| cpe:2.3:o:huawei:mate_20_pro_firmware:*:*:*:*:*:*:*:* | before 10.1.0.270\(c431e7r1p5\) | Vulnerable | Huawei |
| cpe:2.3:h:huawei:mate_20_pro:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Huawei |
| cpe:2.3:o:huawei:mate_20_x_firmware:*:*:*:*:*:*:*:* | before 10.1.0.160\(c00e160r2p8\) | Vulnerable | Huawei |
| cpe:2.3:h:huawei:mate_20_x:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Huawei |
| cpe:2.3:o:huawei:p30_firmware:*:*:*:*:*:*:*:* | before 10.1.0.160\(c00e160r2p11\) | Vulnerable | Huawei |
| cpe:2.3:h:huawei:p30:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Huawei |
| cpe:2.3:o:huawei:p30_pro_firmware:*:*:*:*:*:*:*:* | before 10.1.0.160\(c00e160r2p8\) | Vulnerable | Huawei |
| cpe:2.3:h:huawei:p30_pro:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Huawei |
- cpe:2.3:o:huawei:mate_20_firmware:*:*:*:*:*:*:*:* Versions before 10.1.0.160\(c00e160r3p8\) Vulnerable ·Huawei
- cpe:2.3:h:huawei:mate_20:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei
- cpe:2.3:o:huawei:mate_20_pro_firmware:*:*:*:*:*:*:*:* Versions before 10.1.0.270\(c431e7r1p5\) Vulnerable ·Huawei
- cpe:2.3:h:huawei:mate_20_pro:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei
- cpe:2.3:o:huawei:mate_20_x_firmware:*:*:*:*:*:*:*:* Versions before 10.1.0.160\(c00e160r2p8\) Vulnerable ·Huawei
- cpe:2.3:h:huawei:mate_20_x:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei
- cpe:2.3:o:huawei:p30_firmware:*:*:*:*:*:*:*:* Versions before 10.1.0.160\(c00e160r2p11\) Vulnerable ·Huawei
- cpe:2.3:h:huawei:p30:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei
- cpe:2.3:o:huawei:p30_pro_firmware:*:*:*:*:*:*:*:* Versions before 10.1.0.160\(c00e160r2p8\) Vulnerable ·Huawei
- cpe:2.3:h:huawei:p30_pro:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei
Show 11 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:huawei:mate_20_rs_firmware:*:*:*:*:*:*:*:* | before 10.1.0.160\(c786e160r3p8\) | Vulnerable | Huawei |
| cpe:2.3:h:huawei:mate_20_rs:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Huawei |
| cpe:2.3:o:huawei:honor_magic_2_firmware:*:*:*:*:*:*:*:* | before 10.0.0.187\(c00e61r2p11\) | Vulnerable | Huawei |
| cpe:2.3:h:huawei:honor_magic_2:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Huawei |
| cpe:2.3:o:huawei:honor_20_firmware:*:*:*:*:*:*:*:* | before 10.0.0.175\(c00e58r4p11\) | Vulnerable | Huawei |
| cpe:2.3:h:huawei:honor_20:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Huawei |
| cpe:2.3:o:huawei:honor_20_pro_firmware:*:*:*:*:*:*:*:* | before 10.0.0.194\(c00e62r8p12\) | Vulnerable | Huawei |
| cpe:2.3:h:huawei:honor_20_pro:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Huawei |
| cpe:2.3:o:huawei:honor_v20_firmware:*:*:*:*:*:*:*:* | before 10.0.0.188\(c00e62r2p11\) | Vulnerable | Huawei |
| cpe:2.3:h:huawei:honor_v20:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Huawei |
| cpe:2.3:o:huawei:mate_20_pro_firmware:*:*:*:*:*:*:*:* | before 10.1.0.270\(c635e3r1p5\); before 10.1.0.273\(c636e7r2p4\) | Vulnerable | Huawei |
- cpe:2.3:o:huawei:mate_20_rs_firmware:*:*:*:*:*:*:*:* Versions before 10.1.0.160\(c786e160r3p8\) Vulnerable ·Huawei
- cpe:2.3:h:huawei:mate_20_rs:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei
- cpe:2.3:o:huawei:honor_magic_2_firmware:*:*:*:*:*:*:*:* Versions before 10.0.0.187\(c00e61r2p11\) Vulnerable ·Huawei
- cpe:2.3:h:huawei:honor_magic_2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei
- cpe:2.3:o:huawei:honor_20_firmware:*:*:*:*:*:*:*:* Versions before 10.0.0.175\(c00e58r4p11\) Vulnerable ·Huawei
- cpe:2.3:h:huawei:honor_20:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei
- cpe:2.3:o:huawei:honor_20_pro_firmware:*:*:*:*:*:*:*:* Versions before 10.0.0.194\(c00e62r8p12\) Vulnerable ·Huawei
- cpe:2.3:h:huawei:honor_20_pro:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei
- cpe:2.3:o:huawei:honor_v20_firmware:*:*:*:*:*:*:*:* Versions before 10.0.0.188\(c00e62r2p11\) Vulnerable ·Huawei
- cpe:2.3:h:huawei:honor_v20:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei
- cpe:2.3:o:huawei:mate_20_pro_firmware:*:*:*:*:*:*:*:* Versions before 10.1.0.270\(c635e3r1p5\); before 10.1.0.273\(c636e7r2p4\) Vulnerable ·Huawei
Remediation
- Fix · CNA HUAWEI Mate 20;HUAWEI Mate 20 Pro;HUAWEI Mate 20 X;HUAWEI P30;HUAWEI P30 Pro;HUAWEI Mate 20 RS;HonorMagic2;Honor20;Honor20 PRO;HonorMagic2;HonorV20 Fixed in 10.1.0.160(C00E160R3P8), 10.1.0.160(C00E160R2P8), 10.1.0.160(C00E160R2P11), 10.1.0.160(C786E160R3P8), 10.0.0.187(C00E61R2P11), 10.0.0.175(C00E58R4P11), 10.0.0.194(C00E62R8P12), 10.0.0.188(C00E62R2P11)
Timeline
- 2026-10-02 Threatist record created from CVE-2020-9244
- 2026-10-03 Alias added: GHSA-jx8x-69j8-c7fj
References
More Huawei Honor 20 Firmware vulnerabilities
- TI-2019-06941 Cryptographic flaw in Bluetooth BR/EDR CVSS 3.1HIGH 8.1
- TI-2020-01746 Out-of-bounds read in Honor 20;HONOR 20 PRO;Honor Magic2;HUAWEI Mate 20 X;HUAWEI… CVSS 3.1HIGH 7.1
- TI-2020-07287 Improper handling of exceptional conditions in HONOR 20 PRO CVSS 3.1MEDIUM 5.3
- TI-2019-03732 Improper input validation in Huawei ALP-AL00B CVSS 3.1MEDIUM 5.3
- TI-2019-03731 Improper input validation in Huawei Sydney-L21 CVSS 3.1MEDIUM 5.3
Sources
- CVE-2020-9244 · CVE Program
- CVE-2020-9244 · NVD
- FIRST EPSS
- GHSA-jx8x-69j8-c7fj · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences