HUAWEI smartphones P30 with versions earlier than 10.0.0.185(C00E85R1P11) have an improper access control vulnerability. The software incorrectly restricts access to a function interface from an unauthorized actor, the attacker tricks the user into installing a crafted application, successful exploit could allow the attacker do certain unauthenticated operations.
Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1800
Reference (s):
- https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200325-02-smartphone-en