deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2019-19279
Published: 2020-03-10
Description: A vulnerability has been identified in SIPROTEC 4 and SIPROTEC Compact relays equipped with EN100 Ethernet communication modules (All versions). Specially crafted packets sent to port 50000/UDP of the EN100 Ethernet communication modules could cause a Denial-of-Service of the affected device. A manual reboot is required to recover the service of the device. At the time of advisory publication no public exploitation of this security vulnerability was known to Siemens.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20, CWE-20
References: https://cert-portal.siemens.com/productcert/pdf/ssa-974843.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-974843.pdf
CVE: CVE-2019-19281
Published: 2020-03-10
Description: A vulnerability has been identified in SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) (All versions >= V2.5 and < V20.8), SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants) (All versions >= V2.5 and < V2.8), SIMATIC S7-1500 Software Controller (All versions >= V2.5 and < V20.8). Affected devices contain a vulnerability that allows an unauthenticated attacker to trigger a Denial-of-Service condition. The vulnerability can be triggered if specially crafted UDP packets are sent to the device. The security vulnerability could be exploited by an attacker with network access to the affected systems. Successful exploitation requires no system privileges and no user interaction. An attacker could use the vulnerability to compromise the device availability.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400, CWE-400
References: https://cert-portal.siemens.com/productcert/pdf/ssa-750824.pdf; https://www.us-cert.gov/ics/advisories/icsa-20-042-11; https://cert-portal.siemens.com/productcert/pdf/ssa-750824.pdf
CVE: CVE-2019-19282
Published: 2020-03-10
Description: A vulnerability has been identified in OpenPCS 7 V8.1 (All versions), OpenPCS 7 V8.2 (All versions), OpenPCS 7 V9.0 (All versions < V9.0 Upd3), SIMATIC BATCH V8.1 (All versions), SIMATIC BATCH V8.2 (All versions < V8.2 Upd12), SIMATIC BATCH V9.0 (All versions < V9.0 SP1 Upd5), SIMATIC NET PC Software V14 (All versions < V14 SP1 Update 14), SIMATIC NET PC Software V15 (All versions), SIMATIC NET PC Software V16 (All versions < V16 Update 1), SIMATIC PCS 7 V8.1 (All versions), SIMATIC PCS 7 V8.2 (All versions), SIMATIC PCS 7 V9.0 (All versions < V9.0 SP3), SIMATIC Route Control V8.1 (All versions), SIMATIC Route Control V8.2 (All versions), SIMATIC Route Control V9.0 (All versions < V9.0 Upd4), SIMATIC WinCC (TIA Portal) V13 (All versions < V13 SP2), SIMATIC WinCC (TIA Portal) V14 (All versions < V14 SP1 Update 10), SIMATIC WinCC (TIA Portal) V15.1 (All versions < V15.1 Update 5), SIMATIC WinCC (TIA Portal) V16 (All versions < V16 Update 1), SIMATIC WinCC V7.3 (All versions), SIMATIC WinCC V7.4 (All versions < V7.4 SP1 Update 14), SIMATIC WinCC V7.5 (All versions < V7.5 SP1 Update 1). Through specially crafted messages, when encrypted communication is enabled, an attacker with network access could use the vulnerability to compromise the availability of the system by causing a Denial-of-Service condition.
Successful exploitation requires no system privileges and no user interaction.
CVSS Score: 7.5 (HIGH)
CWE: CWE-131
References: https://cert-portal.siemens.com/productcert/pdf/ssa-270778.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-270778.pdf
CVE: CVE-2019-19290
Published: 2020-03-10
Description: A vulnerability has been identified in Control Center Server (CCS) (All versions < V1.5.0). The DOWNLOADS section in the web interface of the Control Center
Server (CCS) contains a path traversal vulnerability
that could allow an authenticated remote attacker to access and download
arbitrary files from the server where CCS is installed.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22, CWE-22
References: https://cert-portal.siemens.com/productcert/pdf/ssa-761844.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-844761.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-761844.pdf
CVE: CVE-2019-19291
Published: 2020-03-10
Description: A vulnerability has been identified in Control Center Server (CCS) (All versions < V1.5.0), SiNVR/SiVMS Video Server (All versions < V5.0.0). The FTP services of the SiVMS/SiNVR Video Server and the Control Center Server (CCS) maintain
log files that store login credentials in cleartext.
In configurations where the FTP service is enabled, authenticated remote
attackers could extract login credentials of other users of the service.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-313, CWE-312
References: https://cert-portal.siemens.com/productcert/pdf/ssa-761844.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-844761.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-761844.pdf
CVE: CVE-2019-19292
Published: 2020-03-10
Description: A vulnerability has been identified in Control Center Server (CCS) (All versions < V1.5.0). The Control Center Server (CCS) contains an SQL injection
vulnerability in its XML-based communication protocol as provided by default
on ports 5444/tcp and 5440/tcp.
An authenticated remote attacker could exploit this vulnerability to
read or modify the CCS database and potentially execute administrative
database operations or operating system commands.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89, CWE-89
References: https://cert-portal.siemens.com/productcert/pdf/ssa-761844.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-844761.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-761844.pdf
CVE: CVE-2019-19293
Published: 2020-03-10
Description: A vulnerability has been identified in Control Center Server (CCS) (All versions < V1.5.0). The web interface of the Control Center Server (CCS) contains a
reflected Cross-site Scripting (XSS) vulnerability
that could allow an unauthenticated remote attacker to steal sensitive data
or execute administrative actions on behalf of a legitimate administrator
of the CCS web interface.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://cert-portal.siemens.com/productcert/pdf/ssa-761844.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-844761.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-761844.pdf
CVE: CVE-2019-19294
Published: 2020-03-10
Description: A vulnerability has been identified in Control Center Server (CCS) (All versions < V1.5.0). The web interface of the Control Center Server (CCS) contains
multiple stored Cross-site Scripting (XSS) vulnerabilities in several input
fields.
This could allow an authenticated remote attacker to inject malicious
JavaScript code into the CCS web application that is later executed
in the browser context of any other user who views the relevant CCS
web content.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://cert-portal.siemens.com/productcert/pdf/ssa-761844.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-844761.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-761844.pdf
CVE: CVE-2019-19295
Published: 2020-03-10
Description: A vulnerability has been identified in Control Center Server (CCS) (All versions < V1.5.0). The Control Center Server (CCS) does not enforce logging of
security-relevant activities in its XML-based communication protocol
as provided by default on ports 5444/tcp and 5440/tcp.
An authenticated remote attacker could exploit this vulnerability to
perform covert actions that are not visible in the application log.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-778
References: https://cert-portal.siemens.com/productcert/pdf/ssa-761844.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-844761.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-761844.pdf
CVE: CVE-2019-19296
Published: 2020-03-10
Description: A vulnerability has been identified in SiNVR/SiVMS Video Server (All versions < V5.0.0). The two FTP services (default ports 21/tcp and 5411/tcp) of the SiVMS/SiNVR Video
Server contain a path traversal vulnerability
that could allow an authenticated remote attacker to access and download
arbitrary files from the server, if the FTP services are enabled.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-22, CWE-22
References: https://cert-portal.siemens.com/productcert/pdf/ssa-844761.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-844761.pdf
CVE: CVE-2019-19297
Published: 2020-03-10
Description: A vulnerability has been identified in SiNVR/SiVMS Video Server (All versions < V5.0.0). The streaming service (default port 5410/tcp) of the SiVMS/SiNVR Video Server
contains a path traversal vulnerability, that could allow an
unauthenticated remote attacker to access and download arbitrary files from the server.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22, CWE-22
References: https://cert-portal.siemens.com/productcert/pdf/ssa-844761.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-844761.pdf
CVE: CVE-2019-19298
Published: 2020-03-10
Description: A vulnerability has been identified in SiNVR/SiVMS Video Server (All versions < V5.0.0), SiNVR/SiVMS Video Server (All versions >= V5.0.0 < V5.0.2). The streaming service (default port 5410/tcp) of the SiVMS/SiNVR Video Server
contains a input validation vulnerability, that could allow
an unauthenticated remote attacker to cause a Denial-of-Service condition
by sending malformed HTTP requests.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20, CWE-20
References: https://cert-portal.siemens.com/productcert/pdf/ssa-844761.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-844761.pdf
CVE: CVE-2019-19299
Published: 2020-03-10
Description: A vulnerability has been identified in SiNVR/SiVMS Video Server (All versions < V5.0.0), SiNVR/SiVMS Video Server (All versions >= V5.0.0 < V5.0.2), SiNVR/SiVMS Video Server (All versions >= V5.0.2). The streaming service (default port 5410/tcp) of the SiVMS/SiNVR Video Server
applies weak cryptography when exposing device (camera) passwords.
This could allow an unauthenticated remote attacker to read and decrypt
the passwords and conduct further attacks.
CVSS Score: 7.5 (HIGH)
CWE: CWE-326, CWE-326
References: https://cert-portal.siemens.com/productcert/pdf/ssa-844761.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-844761.pdf
CVE: CVE-2019-6585
Published: 2020-03-10
Description: A vulnerability has been identified in SCALANCE S602 (All versions >= V3.0 and < V4.1), SCALANCE S612 (All versions >= V3.0 and < V4.1), SCALANCE S623 (All versions >= V3.0 and < V4.1), SCALANCE S627-2M (All versions >= V3.0 and < V4.1). The integrated configuration web server of the affected devices could allow Cross-Site Scripting (XSS) attacks if unsuspecting users are tricked into accessing a malicious link. User interaction is required for a successful exploitation. The user must be logged into the web interface in order for the exploitation to succeed.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-80, CWE-79
References: https://cert-portal.siemens.com/productcert/pdf/ssa-591405.pdf; https://www.us-cert.gov/ics/advisories/icsa-20-042-10; https://cert-portal.siemens.com/productcert/pdf/ssa-591405.pdf
CVE: CVE-2019-7589
Published: 2020-03-10
Description: A vulnerability with the SmartService API Service option exists whereby an unauthorized user could potentially exploit this to upload malicious code to the server that could be executed at system level privileges. This affects Johnson Controls' Kantech EntraPass Corporate Edition versions 8.0 and prior; Kantech EntraPass Global Edition versions 8.0 and prior.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20, CWE-20
References: https://www.johnsoncontrols.com/cyber-solutions/security-advisories; https://www.us-cert.gov/ics/advisories/icsa-20-070-04; https://www.johnsoncontrols.com/cyber-solutions/security-advisories
CVE: CVE-2020-0010
Published: 2020-03-10
Description: In fpc_ta_get_build_info of fpc_ta_kpi.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-137014293References: N/A
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-787
References: https://source.android.com/security/bulletin/2020-03-01; https://source.android.com/security/bulletin/2020-03-01
CVE: CVE-2020-0011
Published: 2020-03-10
Description: In get_auth_result of fpc_ta_hw_auth.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-137648045References: N/A
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-787
References: https://source.android.com/security/bulletin/2020-03-01; https://source.android.com/security/bulletin/2020-03-01
CVE: CVE-2020-0012
Published: 2020-03-10
Description: In fpc_ta_pn_get_unencrypted_image of fpc_ta_pn.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-137648844
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-787
References: https://source.android.com/security/bulletin/2020-03-01; https://source.android.com/security/bulletin/2020-03-01
CVE: CVE-2020-0029
Published: 2020-03-10
Description: In the WifiConfigManager, there is a possible storage of location history which can only be deleted by triggering a factory reset. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-140065828
CVSS Score: 2.3 (LOW)
CWE: CWE-200
References: https://source.android.com/security/bulletin/2020-03-01; https://source.android.com/security/bulletin/2020-03-01
CVE: CVE-2020-0031
Published: 2020-03-10
Description: In triggerAugmentedAutofillLocked and related functions of Session.java, it is possible for Augmented Autofill to display sensitive information to the user inappropriately. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-141703197
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: https://source.android.com/security/bulletin/2020-03-01; https://source.android.com/security/bulletin/2020-03-01
CVE: CVE-2020-0032
Published: 2020-03-10
Description: In ih264d_release_display_bufs of ih264d_utils.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-145364230
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://source.android.com/security/bulletin/2020-03-01; https://source.android.com/security/bulletin/2020-03-01
CVE: CVE-2020-0033
Published: 2020-03-10
Description: In CryptoPlugin::decrypt of CryptoPlugin.cpp, there is a possible out of bounds write due to stale pointer. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-144351324
CVSS Score: 7.8 (HIGH)
CWE: CWE-119, CWE-787
References: https://source.android.com/security/bulletin/2020-03-01; https://source.android.com/security/bulletin/2020-03-01
CVE: CVE-2020-0034
Published: 2020-03-10
Description: In vp8_decode_frame of decodeframe.c, there is a possible out of bounds read due to improper input validation. This could lead to remote information disclosure if error correction were turned on, with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1Android ID: A-62458770
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00048.html; https://lists.debian.org/debian-lts-announce/2021/11/msg00024.html; https://source.android.com/security/bulletin/2020-03-01
CVE: CVE-2020-0035
Published: 2020-03-10
Description: In query of TelephonyProvider.java, there is a possible access to SIM card info due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9Android ID: A-140622024
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-862
References: https://source.android.com/security/bulletin/2020-03-01; https://source.android.com/security/bulletin/2020-03-01
CVE: CVE-2020-0036
Published: 2020-03-10
Description: In hasPermissions of PermissionMonitor.java, there is a possible access to restricted permissions due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-144679405
CVSS Score: 7.8 (HIGH)
CWE: CWE-863
References: https://source.android.com/security/bulletin/2020-03-01; https://source.android.com/security/bulletin/2020-03-01
CVE: CVE-2020-0037
Published: 2020-03-10
Description: In rw_i93_sm_set_read_only of rw_i93.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure over NFC with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-143106535
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: https://source.android.com/security/bulletin/2020-03-01; https://source.android.com/security/bulletin/2020-03-01
CVE: CVE-2020-0038
Published: 2020-03-10
Description: In rw_i93_sm_update_ndef of rw_i93.cc, there is a possible read of uninitialized data due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-143109193
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: https://source.android.com/security/bulletin/2020-03-01; https://source.android.com/security/bulletin/2020-03-01
CVE: CVE-2020-0039
Published: 2020-03-10
Description: In rw_i93_sm_update_ndef of rw_i93.cc, there is a possible read of uninitialized data due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-143155861
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: https://source.android.com/security/bulletin/2020-03-01; https://source.android.com/security/bulletin/2020-03-01
CVE: CVE-2020-0041
Published: 2020-03-10
Description: In binder_transaction of binder.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-145988638References: Upstream kernel
CVSS Score: 7.8 (HIGH)
CWE: CWE-20, CWE-20
References: https://source.android.com/security/bulletin/2020-03-01; https://source.android.com/security/bulletin/2020-03-01; https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-0041
CVE: CVE-2020-0042
Published: 2020-03-10
Description: In fpc_ta_hw_auth_unwrap_key of fpc_ta_hw_auth_qsee.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-137649599
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-125
References: https://source.android.com/security/bulletin/2020-03-01; https://source.android.com/security/bulletin/2020-03-01
CVE: CVE-2020-0043
Published: 2020-03-10
Description: In authorize_enrol of fpc_ta_hw_auth.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-137650218
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-125
References: https://source.android.com/security/bulletin/2020-03-01; https://source.android.com/security/bulletin/2020-03-01
CVE: CVE-2020-0044
Published: 2020-03-10
Description: In set_nonce of fpc_ta_qc_auth.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-137650219
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-125
References: https://source.android.com/security/bulletin/2020-03-01; https://source.android.com/security/bulletin/2020-03-01
CVE: CVE-2020-0058
Published: 2020-03-10
Description: In l2c_rcv_acl_data of l2c_main.cc, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-141745011
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-125
References: https://source.android.com/security/bulletin/pixel/2020-03-01; https://source.android.com/security/bulletin/pixel/2020-03-01
CVE: CVE-2020-0059
Published: 2020-03-10
Description: In btm_ble_batchscan_filter_track_adv_vse_cback of btm_ble_batchscan.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-142543524
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://source.android.com/security/bulletin/pixel/2020-03-01; https://source.android.com/security/bulletin/pixel/2020-03-01
CVE: CVE-2020-0060
Published: 2020-03-10
Description: In query of SmsProvider.java and MmsSmsProvider.java, there is a possible permission bypass due to SQL injection. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-143229845
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-89
References: https://source.android.com/security/bulletin/pixel/2020-03-01; https://source.android.com/security/bulletin/pixel/2020-03-01
CVE: CVE-2020-0061
Published: 2020-03-10
Description: In Pixel Recorder, there is a possible permissions bypass allowing arbitrary apps to record audio. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-145504977
CVSS Score: 5.5 (MEDIUM)
References: https://source.android.com/security/bulletin/pixel/2020-03-01; https://source.android.com/security/bulletin/pixel/2020-03-01
CVE: CVE-2020-0069
Published: 2020-03-10
Description: In the ioctl handlers of the Mediatek Command Queue driver, there is a possible out of bounds write due to insufficient input sanitization and missing SELinux restrictions. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-147882143References: M-ALPS04356754
CVSS Score: 7.8 (HIGH)
CWE: CWE-787, CWE-787
References: http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200527-01-mtk-en; https://source.android.com/security/bulletin/2020-03-01; http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200527-01-mtk-en