6.5
CVSSv3

CVE-2020-9069

Published: 21/05/2020 Updated: 21/07/2021
CVSS v2 Base Score: 3.3 | Impact Score: 2.9 | Exploitability Score: 6.5
CVSS v3 Base Score: 6.5 | Impact Score: 3.6 | Exploitability Score: 2.8
VMScore: 294
Vector: AV:A/AC:L/Au:N/C:P/I:N/A:N

Vulnerability Summary

There is an information leakage vulnerability in some Huawei products. An unauthenticated, adjacent attacker could exploit this vulnerability to decrypt data. Successful exploitation may leak information randomly. Affected product versions include: Anne-AL00 Versions earlier than 9.1.0.331(C675E9R1P3T8); Berkeley-L09 Versions earlier than 10.0.1.1(C675R1); CD16-10 Versions earlier than 10.0.2.8; CD17-10 Versions earlier than 10.0.2.8; CD17-16 Versions earlier than 10.0.2.8; CD18-10 Versions earlier than 10.0.2.8; CD18-16 Versions earlier than 10.0.2.8; Columbia-TL00B Versions earlier than 9.0.0.187(C01E181R1P20T8); E6878-370 Versions earlier than 10.0.5.1(H610SP10C00); HUAWEI P30 lite Versions earlier than 10.0.0.185(C605E3R1P3), Versions earlier than 10.0.0.197(C432E8R2P7); HUAWEI nova 4e Versions earlier than 10.0.0.158(C00E64R1P9); Honor 10 Lite 9.0.1.113(C675E11R1P12); LelandP-L22A Versions earlier than 9.1.0.166(C675E5R1P4T8); Marie-AL00AX Versions earlier than 10.0.0.158(C00E64R1P9); Marie-AL00AY Versions earlier than 10.0.0.158(C00E64R1P9); Marie-AL00BX Versions earlier than 10.0.0.158(C00E64R1P9); Marie-L03BX Versions earlier than 10.0.0.188(C605E5R1P1); Marie-L21BX Versions earlier than 10.0.0.188(C432E4R4P1), Versions earlier than 10.0.0.188(C461E5R3P1); Marie-L22BX Versions earlier than 10.0.0.188(C636E3R3P1); Marie-L23BX Versions earlier than 10.0.0.188(C605E5R1P1); TC5200-16 Versions earlier than 10.0.2.8; WS5200-11 Versions earlier than 10.0.2.8; WS5200-12 Versions earlier than 10.0.2.23; WS5200-16 Versions earlier than 10.0.2.8; WS5200-17 Versions earlier than 10.0.2.23; WS5800-10 Versions earlier than 10.0.3.27; WS6500-10 Versions earlier than 10.0.2.8; WS6500-16 Versions earlier than 10.0.2.8

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

huawei anne-al00_firmware

huawei berkeley-l09_firmware

huawei cd16-10_firmware

huawei cd17-10_firmware

huawei cd17-16_firmware

huawei cd18-10_firmware

huawei cd18-16_firmware

huawei columbia-tl00b_firmware

huawei e6878-370_firmware

huawei honor_10_lite_firmware

huawei lelandp-l22a_firmware

huawei tc5200-16_firmware

huawei ws5200-11_firmware

huawei ws5200-16_firmware

huawei ws5200-17_firmware

huawei ws5800-10_firmware

huawei ws6500-10_firmware

huawei ws6500-16_firmware

Vendor Advisories

There is an information leakage vulnerability in some Huawei products An unauthenticated, adjacent attacker could exploit this vulnerability to decrypt data Successful exploitation may leak information randomly (Vulnerability ID: HWPSIRT-2020-02166) This vulnerability has been assigned a Common Vulnerabilities and Exposures (CVE) ID: CVE-2020-90 ...