Improper Authentication Vulnerability in Honor 9X Smartphones

Improper Authentication Vulnerability in Honor 9X Smartphones

CVE-2020-1833 · LOW Severity

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Honor 9X smartphones with versions earlier than 9.1.1.172(C00E170R8P1) have an improper authentication vulnerability. A logic error occurs when handling clock function, an attacker should do a series of crafted operations quickly before the phone is unlocked, successful exploit could allow the attacker to access clock information without unlock the phone.

Learn more about our Web Application Penetration Testing UK.