CVE-2020-1793 : Security Advisory and Response

An improper authentication vulnerability in Huawei's Mate 20 and Mate 30 Pro smartphones could allow attackers to access locked application data.

Understanding CVE-2020-1793

This CVE details a security issue affecting certain Huawei smartphones.

What is CVE-2020-1793?

CVE-2020-1793 is an improper authentication vulnerability present in Huawei's Mate 20 and Mate 30 Pro devices. It stems from the applock feature failing to enforce adequate authentication in specific situations, potentially enabling unauthorized access to locked app data.

The Impact of CVE-2020-1793

The vulnerability could be exploited by malicious actors to extract sensitive information from applications protected by the applock feature on affected Huawei smartphones.

Technical Details of CVE-2020-1793

This section outlines specific technical aspects of the CVE.

Vulnerability Description

The vulnerability allows unauthorized access to locked application data due to insufficient authentication by the applock feature on Huawei Mate 20 and Mate 30 Pro devices.

Affected Systems and Versions

Affected Products: HUAWEI Mate 20, HUAWEI Mate 30 Pro
Vulnerable Versions:
Versions earlier than 10.0.0.188(C00E74R3P8) for HUAWEI Mate 20
Versions earlier than 10.0.0.203(C00E202R7P2) for HUAWEI Mate 30 Pro

Exploitation Mechanism

The vulnerability could be exploited by performing unauthorized actions that bypass the applock authentication, enabling access to restricted application data.

Mitigation and Prevention

Best practices to address and prevent this vulnerability.

Immediate Steps to Take

Update the affected devices to versions equal to or later than 10.0.0.188(C00E74R3P8) for HUAWEI Mate 20 and 10.0.0.203(C00E202R7P2) for Mate 30 Pro
Avoid using the applock feature for securing sensitive data until the devices are patched

Long-Term Security Practices

Regularly update devices with the latest security patches
Use strong authentication methods to secure device and app access

Patching and Updates

Apply firmware updates provided by Huawei to address the vulnerability and enhance device security