Skip to content
Fencer Intel
medium 5.5

CVE-2020-9235 json

Huawei smartphones HONOR 20 PRO Versions earlier than 10.1.0.230(C432E9R5P1),Versions earlier than 10.1.0.231(C10E3R3P2),Versions earlier t…

published 6y ago modified 4mo ago also EUVD-2020-30064

cvss
5.5
version 3.1, NVD
cisa kev
Not listed
not in CISA's catalog
epss
0.2%
EPSS 0.2% chance of exploitation in 30 days, percentile 15%
public exploits
0
none known

Summary

Huawei smartphones HONOR 20 PRO Versions earlier than 10.1.0.230(C432E9R5P1),Versions earlier than 10.1.0.231(C10E3R3P2),Versions earlier than 10.1.0.231(C185E3R5P1),Versions earlier than 10.1.0.231(C636E3R3P1);Versions earlier than 10.1.0.212(C432E10R3P4),Versions earlier than 10.1.0.213(C636E3R4P3),Versions earlier than 10.1.0.214(C10E5R4P3),Versions earlier than 10.1.0.214(C185E3R3P3);Versions earlier than 10.1.0.212(C00E210R5P1);Versions earlier than 10.1.0.160(C00E160R2P11);Versions earlier than 10.1.0.160(C00E160R2P11);Versions earlier than 10.1.0.160(C01E160R2P11);Versions earlier than 10.1.0.160(C00E160R2P11);Versions earlier than 10.1.0.160(C00E160R8P12);Versions earlier than 10.1.0.230(C432E9R5P1),Versions earlier than 10.1.0.231(C10E3R3P2),Versions earlier than 10.1.0.231(C636E3R3P1);Versions earlier than 10.1.0.225(C431E3R1P2),Versions earlier than 10.1.0.225(C432E3R1P2) contain an information vulnerability. A module has a design error that is lack of control of input. Attackers can exploit this vulnerability to obtain some information. This can lead to information leak.

Patch / fix

  • huawei honor_20_pro_firmware 10.1.0.230\(c432e9r5p1\), 10.1.0.231\(c10e3r3p2\), 10.1.0.231\(c185e3r5p1\), 10.1.0.231\(c636e3r3p1\)
  • huawei honor_view_20_firmware 10.1.0.212\(c432e10r3p4\), 10.1.0.213\(c636e3r4p3\), 10.1.0.214\(c10e5r4p3\), 10.1.0.214\(c185e3r3p3\)
  • huawei oxfords-an00a_firmware 10.1.0.212\(c00e210r5p1\)
  • huawei princeton-al10b_firmware 10.1.0.160\(c00e160r2p11\)
  • huawei princeton-al10d_firmware 10.1.0.160\(c00e160r2p11\)
  • huawei princeton-tl10c_firmware 10.1.0.160\(c01e160r2p11\)
  • huawei tony-al00b_firmware 10.1.0.160\(c00e160r2p11\)
  • huawei yale-al00a_firmware 10.1.0.160\(c00e160r8p12\)
  • huawei yale-l21a_firmware 10.1.0.230\(c432e9r5p1\), 10.1.0.231\(c10e3r3p2\), 10.1.0.231\(c636e3r3p1\)
  • huawei yale-l61a_firmware 10.1.0.225\(c431e3r1p2\), 10.1.0.225\(c432e3r1p2\)

Is CVE-2020-9235 in your stack? Fencer shows which of your repositories are affected as soon as an advisory lands, and opens the fix as a pull request.

Check with Fencer

Exploit prediction

0.24% chance of exploitation in the next 30 days, higher than 15% of all scored CVEs (FIRST EPSS, 2026-11-09).

CVSS scores

assigned by version score vector
NVD 3.1 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
NVD 2.0 2.1 AV:L/AC:L/Au:N/C:P/I:N/A:N

Affected products

  • n/a HONOR 20 PRO;Honor View 20;OxfordS-AN00A;Princeton-AL10B;Princeton-AL10D;Princeton-TL10C;Tony-AL00B;Yale-AL00A;Yale-L21A;Yale-L61A

Classification

Weakness
  • CWE-20 Improper Input Validation

References

Sources

Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.