Medium severity5.5NVD Advisory· Published Apr 20, 2020· Updated Jun 17, 2026

CVE-2020-9070

Description

Huawei smartphones Taurus-AL00B with versions earlier than 10.0.0.205(C00E201R7P2) have an improper authentication vulnerability. The software insufficiently validate the user's identity when a user wants to do certain operation. An attacker can trick user into installing a malicious application to exploit this vulnerability. Successful exploit may cause some information disclosure.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Huawei/Taurus Al00b Firmware
cpe:2.3:o:huawei:taurus-al00b_firmware:*:*:*:*:*:*:*:*
Range: <10.0.0.205\(c00e201r7p2\)
Huawei/smartphone Taurus-AL00Bllm-fuzzy
Range: <10.0.0.205(C00E201R7P2)
Huawei/Taurus-AL00Bcpe-rescue
Range: Versions earlier than 10.0.0.205(C00E201R7P2)

Patches

Vulnerability mechanics

References

www.huawei.com/en/psirt/security-advisories/huawei-sa-20200415-01-smartphone-ennvdVendor Advisory
www.huawei.com/en/psirt/security-advisories/huawei-sa-20200415-01-smartphone-ennvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.358
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000