huawei mate 20 firmware

Name: huawei mate 20 firmware
Brand: huawei

productUS

cpe:2.3:o:huawei:mate_20_firmware:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

EPSS ≥ 10%

critical

by severity

0critical5high19medium7low

updated 2026-10-28

vulnerabilities (31)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2020-0022US	high8.8	6.05% (93rd)	Exploit	10.0.0.195\(c00e74r3p8\)	2020-02-13	< 10.0.0.195\(c00e74r3p8\)
CVE-2019-9506US	high8.1OT elevated	2.69% (86th)	Exploit	no fix	2019-08-14	—
CVE-2019-5251US	medium5.5	0.84% (58th)	—	9.1.0.139\(c00e133r3p1\)	2019-12-13	< 9.1.0.139\(c00e133r3p1\)
CVE-2020-9247US	high7.8	0.83% (57th)	—	10.1.0.160\(c00e160r3p8\)	2020-12-07	< 10.1.0.160\(c00e160r3p8\)
CVE-2019-5225US	high7.8	0.83% (57th)	—	hima-al00b_9.1.0.135\(c00e200r2p1\)	2019-11-29	< hima-al00b_9.1.0.135\(c00e200r2p1\)
CVE-2018-7956US	medium5.3	0.76% (55th)	—	no fix	2018-12-04	—
CVE-2020-9113US	high8.0	0.45% (39th)	—	10.0.0.188\(c00e74r3p8\)	2020-10-19	< 10.0.0.188\(c00e74r3p8\)
CVE-2019-5303US	medium5.3	0.32% (25th)	—	9.1.0.131\(c00e131r3p1\)	2020-04-27	< 9.1.0.131\(c00e131r3p1\)
CVE-2019-5302US	medium5.3	0.32% (25th)	—	9.1.0.131\(c00e131r3p1\)	2020-04-27	< 9.1.0.131\(c00e131r3p1\)
CVE-2020-9092US	medium4.6	0.28% (21st)	—	10.1.0.163\(c00e160r3p8\)	2020-10-19	< 10.1.0.163\(c00e160r3p8\)
CVE-2020-1787US	medium6.6	0.26% (18th)	—	9.1.0.139\(c00e133r3p1\)	2020-01-09	< 9.1.0.139\(c00e133r3p1\)
CVE-2020-1794US	medium4.6	0.24% (16th)	—	10.0.0.188\(c00e74r3p8\)	2020-03-20	< 10.0.0.188\(c00e74r3p8\)
CVE-2020-1793US	medium4.6	0.24% (16th)	—	10.0.0.188\(c00e74r3p8\)	2020-03-20	< 10.0.0.188\(c00e74r3p8\)
CVE-2019-5227US	medium5.5	0.24% (14th)	—	hima-al00b_9.1.0.135\(c00e133r2p1\)	2019-11-29	< hima-al00b_9.1.0.135\(c00e133r2p1\)
CVE-2019-5226US	medium5.5	0.24% (14th)	—	hima-al00b_9.1.0.135\(c00e133r2p1\)	2019-11-29	< hima-al00b_9.1.0.135\(c00e133r2p1\)
CVE-2020-9244US	medium6.8OT elevated	0.23% (14th)	—	10.1.0.160\(c00e160r3p8\)	2020-08-11	< 10.1.0.160\(c00e160r3p8\)
CVE-2020-9082US	medium4.6	0.23% (14th)	—	10.1.0.160\(c00\)	2024-12-27	< 10.1.0.160\(c00\)
CVE-2020-1807US	low3.5	0.23% (14th)	—	10.0.0.188\(c00e74r3p8\)	2020-04-27	< 10.0.0.188\(c00e74r3p8\)
CVE-2020-9252US	low2.3	0.22% (13th)	—	10.1.0.160\(c00e160r3p8\)	2020-07-17	< 10.1.0.160\(c00e160r3p8\)
CVE-2019-5220US	medium4.6OT elevated	0.22% (13th)	—	hima-al00b\/hima-tl00b_9.0.0.200\(c00e200r2p1\)	2019-07-10	< hima-al00b\/hima-tl00b_9.0.0.200\(c00e200r2p1\)
CVE-2020-1840US	medium6.0	0.22% (13th)	—	no fix	2020-01-21	≤ 10.0.0.175\(c00e70r3p8\)
CVE-2020-9109US	medium4.6	0.22% (12th)	—	10.1.0.160\(c00e160r3p8\)	2020-10-12	2 versions
CVE-2020-1795US	low2.4	0.21% (12th)	—	10.0.0.188\(c00e74r3p8\)	2020-03-20	< 10.0.0.188\(c00e74r3p8\)
CVE-2020-9103US	medium4.6	0.21% (11th)	—	no fix	2020-08-17	= 9.0.0.205(c00e205r2p1)
CVE-2020-9083US	low2.4	0.21% (11th)	—	10.1.0.163\(c00e160r3p8\)	2020-09-03	< 10.1.0.163\(c00e160r3p8\)
CVE-2021-22440US	medium4.6	0.21% (11th)	—	no fix	2021-07-13	2 versions
CVE-2020-1797US	low2.4	0.21% (11th)	—	10.0.0.185\(c00e74r3p8\)	2020-05-29	< 10.0.0.185\(c00e74r3p8\)
CVE-2020-1791US	low2.4OT elevated	0.21% (11th)	—	10.0.0.185\(c00e74r3p8\)	2020-02-18	< 10.0.0.185\(c00e74r3p8\)
CVE-2020-9081US	medium6.8OT elevated	0.20% (10th)	—	10.1.0.160\(c01e160r2p8\)	2024-12-27	2 versions
CVE-2020-1796US	medium6.6OT elevated	0.20% (9th)	—	no fix	2020-03-20	≤ 10.0.0.188\(c00e74r3p8\)
CVE-2020-1831US	low2.4OT elevated	0.20% (9th)	—	10.0.0.195\(sp31c00e74r3p8\)	2020-05-29	< 10.0.0.195\(sp31c00e74r3p8\)

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-287Improper Authentication6 CVEs
CWE-863Incorrect Authorization5 CVEs
CWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')3 CVEs
CWE-20Improper Input Validation3 CVEs
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')3 CVEs
CWE-346Origin Validation Error2 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor1 CVEs
CWE-266Incorrect Privilege Assignment1 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE31 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan