CVE-2020-9086

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2020-9086
There is a buffer error vulnerability in some Huawei product. An unauthenticated attacker may send special UPNP message to the affected products. Due to insufficient input validation of some value, successful exploit may cause some service abnormal. (Vulnerability ID: HWPSIRT-2017-08234) This vulnerability has been assigned a Common Vulnerabilities and Exposures (CVE) ID: CVE-2020-9086.

4.3 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 2.8 / Impact : 1.4

Attack Vector ADJACENT_NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact LOW

Scope UNCHANGED

References
Link Resource
https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200826-01-buffer_en Vendor Advisory
Configurations

Configuration 1 (hide)

AND
OR cpe:2.3:o:huawei:b612_firmware:b612s-25dtcpu-v100r001b192d03sp00c234:*:*:*:*:*:*:*
cpe:2.3:o:huawei:b612_firmware:b612s-25dtcpu-v100r001b192d03sp00c287:*:*:*:*:*:*:*
cpe:2.3:o:huawei:b612_firmware:b612s-25dtcpu-v100r001b192d05sp00c00:*:*:*:*:*:*:*
cpe:2.3:h:huawei:b612:-:*:*:*:*:*:*:*
History

13 Jan 2025, 19:34

Type Values Removed Values Added
Summary
  • (es) Existe una vulnerabilidad de error de búfer en algunos productos de Huawei. Un atacante no autenticado puede enviar un mensaje UPNP especial a los productos afectados. Debido a la validación de entrada insuficiente de algún valor, una explotación exitosa puede provocar que algunos servicios sean anormales. (Identificación de vulnerabilidad: HWPSIRT-2017-08234) A esta vulnerabilidad se le ha asignado una identificación de vulnerabilidades y exposiciones comunes (CVE): CVE-2020-9086.
CWE CWE-787
References () https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200826-01-buffer_en - () https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200826-01-buffer_en - Vendor Advisory
CPE cpe:2.3:o:huawei:b612_firmware:b612s-25dtcpu-v100r001b192d03sp00c234:*:*:*:*:*:*:*
cpe:2.3:h:huawei:b612:-:*:*:*:*:*:*:*
cpe:2.3:o:huawei:b612_firmware:b612s-25dtcpu-v100r001b192d05sp00c00:*:*:*:*:*:*:*
cpe:2.3:o:huawei:b612_firmware:b612s-25dtcpu-v100r001b192d03sp00c287:*:*:*:*:*:*:*
First Time Huawei b612
Huawei b612 Firmware
Huawei

27 Dec 2024, 10:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-12-27 10:15

Updated : 2025-01-13 19:34

NVD link : CVE-2020-9086

Mitre link : CVE-2020-9086

CVE.ORG link : CVE-2020-9086

JSON object : View

Products Affected

huawei

  • b612_firmware
  • b612
CWE
CWE-124

Buffer Underwrite ('Buffer Underflow')

CWE-787

Out-of-bounds Write