PatchTheCVECVE-2020-9080: There is an improper privilege management vulnerability in Huawei smart phone product
CVE-2020-9080 is a high-severity flaw (CVSS 7.8) affecting mate 20 pro firmware, mate 20 pro \(ud\) firmware, nova 5i firmware. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
There is an improper privilege management vulnerability in Huawei smart phone product. A local, authenticated attacker could craft a specific input to exploit this vulnerability. Successful exploitation may lead to local privilege escalation. (Vulnerability ID: HWPSIRT-2020-05272) This vulnerability has been assigned a Common Vulnerabilities and Exposures (CVE) ID: CVE-2020-9080.
Why this priority
- High severity
No fix is published yet: follow the downgrade or mitigation steps.
Risk facts
| CVSS score | 7.8 (High) |
| Attack vector | Local |
| Attack complexity | Low |
| Privileges needed | Low |
| User interaction | None |
| EPSS exploit chance | 0.1% (top 97%) |
| CISA exploited list | No |
| Weakness | CWE-269 |
| Published | 2024-12-27 |
| Last modified | 2026-06-17 |
Last updated 2026-06-17 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score
Am I affected?
Timeline
- Published CVE record published
- Updated Record last modified
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Quick answers
How do I fix CVE-2020-9080?
mate 20 pro firmware: mitigate or apply the listed mitigation; mate 20 pro \(ud\) firmware: mitigate or apply the listed mitigation; nova 5i firmware: mitigate or apply the listed mitigation. Exact commands for each OS are on this page.
Is CVE-2020-9080 being exploited?
CVE-2020-9080 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.
What does CVE-2020-9080 affect?
CVE-2020-9080 affects mate 20 pro firmware, mate 20 pro \(ud\) firmware, nova 5i firmware. Severity is high (CVSS 7.8). There is an improper privilege management vulnerability in Huawei smart phone product. A local, authenticated attacker could craft a specific input to exploit this vulnerability. Successful exploitation may lead to local privilege escalatio
How urgent is CVE-2020-9080?
Priority 28/100. High severity
Software pages
Related CVEs
- CVE-2020-9250 LOW 3.3 MITIGATE There is an insufficient authentication vulnerability in some Huawei smart phone