There are two denial of service vulnerabilities on some Huawei smartphones. An attacker may send specially crafted TD-SCDMA messages from a rogue base station to the affected devices. Due to insufficient input validation of two values when parsing the messages, successful exploit
There are two denial of service vulnerabilities on some Huawei smartphones. An attacker may send specially crafted TD-SCDMA messages from a rogue base station to the affected devices. Due to insufficient input validation of two values when parsing the messages, successful exploit may cause device abnormal. This is 2 out of 2 vulnerabilities. Different than CVE-2020-5302. Affected products are…
| Vendor | Product | Versions |
|---|---|---|
| Huawei | ALP | AL00B — Versions earlier than 9.1.0.333(C00E333R2P1T8) |
| Huawei | ALP | L09 — Versions earlier than 9.1.0.300(C432E4R1P9T8) |
| Huawei | ALP | L29 — Versions earlier than 9.1.0.315(C636E5R1P13T8) |
| Huawei | BLA | L29C — Versions earlier than 9.1.0.321(C636E4R1P14T8), Versions earlier than 9.1.0.330(C432E6R1P12T8), Versions earlier than 9.1.0.302(C635E4R1P13T8) |
| Huawei | Berkeley | AL20 — Versions earlier than 9.1.0.333(C00E333R2P1T8) |
| Huawei | Berkeley | L09 — Versions earlier than 9.1.0.350(C10E3R1P14T8), Versions earlier than 9.1.0.351(C432E5R1P13T8), Versions earlier than 9.1.0.350(C636E4R1P13T8) |
| Huawei | Charlotte | L09C — Versions earlier than 9.1.0.311(C185E4R1P11T8), Versions earlier than 9.1.0.345(C432E8R1P11T8) |
| Huawei | Charlotte | L29C — Versions earlier than 9.1.0.325(C185E4R1P11T8), Versions earlier than 9.1.0.335(C636E3R1P13T8), Versions earlier than 9.1.0.345(C432E8R1P11T8), Versions earlier than 9.1.0.336(C605E3R1P12T8) |
| Huawei | Columbia | AL10B — Versions earlier than 9.1.0.333(C00E333R1P1T8) |
| Huawei | Columbia | L29D — Versions earlier than 9.1.0.350(C461E3R1P11T8), Versions earlier than 9.1.0.350(C185E3R1P12T8), Versions earlier than 9.1.0.350(C10E5R1P14T8), Versions earlier than 9.1.0.351(C432E5R1P13T8) |
| Huawei | Cornell | AL00A — Versions earlier than 9.1.0.333(C00E333R1P1T8) |
| Huawei | Cornell | L29A — Versions earlier than 9.1.0.328(C185E1R1P9T8), Versions earlier than 9.1.0.328(C432E1R1P9T8), Versions earlier than 9.1.0.330(C461E1R1P9T8), Versions earlier than 9.1.0.328(C636E2R1P12T8) |
| Huawei | Emily | L09C — Versions earlier than 9.1.0.336(C605E4R1P12T8), Versions earlier than 9.1.0.311(C185E2R1P12T8), Versions earlier than 9.1.0.345(C432E10R1P12T8) |
| Huawei | Emily | L29C — Versions earlier than 9.1.0.311(C605E2R1P12T8), Versions earlier than 9.1.0.311(C636E7R1P13T8), Versions earlier than 9.1.0.311(C432E7R1P11T8) |
| Huawei | Ever | L29B — Versions earlier than 9.1.0.311(C185E3R3P1) |
| Huawei | HUAWEI Mate 20 | Versions earlier than 9.1.0.131(C00E131R3P1) |
| Huawei | HUAWEI Mate 20 Pro | Versions earlier than 9.1.0.310(C185E10R2P1) |
| Huawei | HUAWEI Mate 20 RS | Versions earlier than 9.1.0.135(C786E133R3P1) |
| Huawei | HUAWEI Mate 20 X | Versions earlier than 9.1.0.135(C00E133R2P1) |
| Huawei | HUAWEI P20 | Versions earlier than 9.1.0.333(C00E333R1P1T8) |
| Huawei | HUAWEI P20 Pro | Versions earlier than 9.1.0.333(C00E333R1P1T8) |
| Huawei | HUAWEI P30 | Versions earlier than 9.1.0.193 |
| Huawei | HUAWEI P30 Pro | Versions earlier than 9.1.0.186(C00E180R2P1) |
| Huawei | HUAWEI Y9 2019 | Versions earlier than 9.1.0.220(C605E3R1P1T8) |
| Huawei | HUAWEI nova lite 3 | Versions earlier than 9.1.0.305(C635E8R2P2) |
| Huawei | Honor 10 Lite | Versions earlier than 9.1.0.283(C605E8R2P2) |
| Huawei | Honor 8X | Versions earlier than 9.1.0.221(C461E2R1P1T8) |
| Huawei | Honor View 20 | Versions earlier than 9.1.0.238(C432E1R3P1) |
| Huawei | Jackman | L22 — Versions earlier than 9.1.0.247(C636E2R4P1T8) |
| Huawei | Paris | L21B — Versions earlier than 9.1.0.331(C432E1R1P2T8) |
| Huawei | Paris | L21MEB — Versions earlier than 9.1.0.331(C185E4R1P3T8) |
| Huawei | Paris | L29B — Versions earlier than 9.1.0.331(C636E1R1P3T8) |
| Huawei | Sydney | AL00 — Versions earlier than 9.1.0.212(C00E62R1P7T8) |
| Huawei | Sydney | L21 — Versions earlier than 9.1.0.215(C432E1R1P1T8), Versions earlier than 9.1.0.213(C185E1R1P1T8) |
| Huawei | Sydney | L21BR — Versions earlier than 9.1.0.213(C185E1R1P2T8) |
| Huawei | Sydney | L22 — Versions earlier than 9.1.0.258(C636E1R1P1T8) |
| Huawei | Sydney | L22BR — Versions earlier than 9.1.0.258(C636E1R1P1T8) |
| Huawei | SydneyM | AL00 — Versions earlier than 9.1.0.228(C00E78R1P7T8) |
| Huawei | SydneyM | L01 — Versions earlier than 9.1.0.215(C782E2R1P1T8), Versions earlier than 9.1.0.213(C185E1R1P1T8), Versions earlier than 9.1.0.270(C432E3R1P1T8) |
| Huawei | SydneyM | L03 — Versions earlier than 9.1.0.217(C605E1R1P1T8) |
| Huawei | SydneyM | L21 — Versions earlier than 9.1.0.221(C461E1R1P1T8), Versions earlier than 9.1.0.215(C432E4R1P1T8) |
| Huawei | SydneyM | L22 — Versions earlier than 9.1.0.259(C185E1R1P2T8), Versions earlier than 9.1.0.220(C635E1R1P2T8), Versions earlier than 9.1.0.216(C569E1R1P1T8) |
| Huawei | SydneyM | L23 — Versions earlier than 9.1.0.226(C605E2R1P1T8) |
| Huawei | Yale | L21A — Versions earlier than 9.1.0.154(C432E2R3P2), Versions earlier than 9.1.0.154(C461E2R2P1), Versions earlier than 9.1.0.154(C636E2R2P1) |
| Huawei | Honor 20 | Versions earlier than 9.1.0.152(C00E150R5P1) |
| Huawei | Honor Magic2 | Versions earlier than 10.0.0.187 |
| Huawei | Honor V20 | Versions earlier than 9.1.0.234(C00E234R4P3) |
Not currently listed on the CISA Known Exploited Vulnerabilities (KEV) catalog. EPSS is the best forward-looking signal — see the EPSS row above.
For the full vendor write-up, exploit chains, and reference implementations, see the references list in section 09.
Ask SARA in chat to draft a starting detection for this CVE in your stack of choice.