Vulnerability Details CVE-2020-9237
Huawei smartphone Taurus-AL00B with versions earlier than 10.1.0.126(C00E125R5P3) have a user after free vulnerability. A module is lack of lock protection. Attackers can exploit this vulnerability by launching specific request. This could compromise normal service of the affected device.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.0
EPSS Ranking 6.8%
CVSS Severity
CVSS v3 Score 6.7
CVSS v2 Score 4.6
References
Products affected by CVE-2020-9237
-
cpe:2.3:h:huawei:taurus-al00b:-
-
cpe:2.3:o:huawei:taurus-al00b_firmware:-
-
cpe:2.3:o:huawei:taurus-al00b_firmware:10.0.0.133(c00e132r5p1)
-
cpe:2.3:o:huawei:taurus-al00b_firmware:10.0.0.203(c00e201r7p2)
-
cpe:2.3:o:huawei:taurus-al00b_firmware:10.0.0.205(c00e201r7p2)
-
cpe:2.3:o:huawei:taurus-al00b_firmware:10.0.0.41(sp2c00e41r3p2)