huawei mate 20 x firmware

Name: huawei mate 20 x firmware
Brand: huawei

productUS

cpe:2.3:o:huawei:mate_20_x_firmware:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

EPSS ≥ 10%

critical

by severity

0critical3high7medium1low

updated 2026-10-28

vulnerabilities (11)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2020-0022US	high8.8	6.05% (93rd)	Exploit	10.0.0.195\(c00e74r2p8\)	2020-02-13	< 10.0.0.195\(c00e74r2p8\)
CVE-2019-9506US	high8.1OT elevated	2.69% (86th)	Exploit	no fix	2019-08-14	—
CVE-2020-9247US	high7.8	0.83% (57th)	—	10.1.0.160\(c00e160r2p8\)	2020-12-07	< 10.1.0.160\(c00e160r2p8\)
CVE-2019-5221US	medium6.5	0.47% (40th)	—	ever-l29b_9.1.0.300\(c636e3r2p1\)	2019-07-10	3 versions
CVE-2019-5303US	medium5.3	0.32% (25th)	—	9.1.0.135\(c00e133r2p1\)	2020-04-27	< 9.1.0.135\(c00e133r2p1\)
CVE-2019-5302US	medium5.3	0.32% (25th)	—	9.1.0.135\(c00e133r2p1\)	2020-04-27	< 9.1.0.135\(c00e133r2p1\)
CVE-2020-9244US	medium6.8OT elevated	0.23% (14th)	—	10.1.0.160\(c00e160r2p8\)	2020-08-11	< 10.1.0.160\(c00e160r2p8\)
CVE-2020-9252US	low2.3	0.22% (13th)	—	10.1.0.135\(c00e135r2p8\)	2020-07-17	< 10.1.0.135\(c00e135r2p8\)
CVE-2019-5220US	medium4.6OT elevated	0.22% (13th)	—	ever-al00b_9.0.0.200\(c00e200r2p1\)	2019-07-10	< ever-al00b_9.0.0.200\(c00e200r2p1\)
CVE-2020-9109US	medium4.6	0.22% (12th)	—	10.1.0.160\(c01e160r2p8\)	2020-10-12	2 versions
CVE-2020-1882US	medium4.6	0.21% (12th)	—	10.0.0.176\(c00e70r2p8\)	2020-02-18	< 10.0.0.176\(c00e70r2p8\)

The flaw types (CWEs) most of these CVEs share.

CWE-20Improper Input Validation2 CVEs
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')2 CVEs
CWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')1 CVEs
CWE-287Improper Authentication1 CVEs
CWE-310CWE-3101 CVEs
CWE-327Use of a Broken or Risky Cryptographic Algorithm1 CVEs
CWE-345Insufficient Verification of Data Authenticity1 CVEs
CWE-682Incorrect Calculation1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.