CVE-2020-9070: Huawei Taurus-AL00B Firmware

Medium severity, CVSS 5.5. EPSS: 0.6% chance of exploitation in the next 30 days.

Huawei smartphones Taurus-AL00B with versions earlier than 10.0.0.205(C00E201R7P2) have an improper authentication vulnerability. The software insufficiently validate the user's identity when a user wants to do certain operation. An attacker can trick user into installing a malicious application to exploit this vulnerability. Successful exploit may cause some information disclosure.

Affected products

• Huawei Taurus-AL00B Firmware: before 10.0.0.205\(c00e201r7p2\) (fixed in 10.0.0.205\(c00e201r7p2\))

Published 2020-04-20. Last modified 2026-06-17.