CVE-2020-9073: Huawei p20 Firmware

Low severity, CVSS 2.4. EPSS: 0.2% chance of exploitation in the next 30 days.

Huawei P20 smartphones with versions earlier than 10.0.0.156(C00E156R1P4) have an improper authentication vulnerability. The vulnerability is due to that when an user wants to do certain operation, the software insufficiently validate the user's identity. Attackers need to physically access the smartphone to exploit this vulnerability. Successful exploit could allow the attacker to bypass the limit of student mode function.

Affected products

• Huawei p20 Firmware: before 10.0.0.156\(c00e156r1p4\) (fixed in 10.0.0.156\(c00e156r1p4\))

Published 2020-05-15. Last modified 2026-06-17.