CVE-2020-1833

{"id": "CVE-2020-1833", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 2.1, "accessVector": "LOCAL", "vectorString": "AV:L/AC:L/Au:N/C:P/I:N/A:N", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "LOW", "obtainAllPrivilege": false, "exploitabilityScore": 3.9, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 2.4, "attackVector": "PHYSICAL", "baseSeverity": "LOW", "vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}, "impactScore": 1.4, "exploitabilityScore": 0.9}]}, "published": "2020-05-29T20:15:11.297", "references": [{"url": "https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200527-05-smartphone-en", "tags": ["Vendor Advisory"], "source": "psirt@huawei.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-287"}]}], "descriptions": [{"lang": "en", "value": "Honor 9X smartphones with versions earlier than 9.1.1.172(C00E170R8P1) have an improper authentication vulnerability. A logic error occurs when handling clock function, an attacker should do a series of crafted operations quickly before the phone is unlocked, successful exploit could allow the attacker to access clock information without unlock the phone."}, {"lang": "es", "value": "Los tel\u00e9fonos inteligentes Honor 9X con versiones anteriores a 9.1.1.172(C00E170R8P1), presentan una vulnerabilidad de autenticaci\u00f3n inapropiada. Un error l\u00f3gico ocurre cuando se maneja la funci\u00f3n clock, un atacante debe hacer una serie de operaciones dise\u00f1adas r\u00e1pidamente antes de que el tel\u00e9fono este desbloqueado, una explotaci\u00f3n con \u00e9xito podr\u00eda permitir a un atacante acceder a la informaci\u00f3n de clock sin desbloquear el tel\u00e9fono."}], "lastModified": "2020-06-01T14:55:10.783", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:huawei:honor_9x_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DD57E66F-D2FB-4826-8791-1467C72A8D64", "versionEndExcluding": "9.1.1.172\\(c00e170r8p1\\)"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:huawei:honor_9x:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "0E545AFD-034C-446C-8A96-E04A3AFCFD59"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "psirt@huawei.com"}