CVEvulnerability
CVE-2020-9068
9.8 CRITICAL
Official page ↗
- Status
- Modified
- Published
- 2020-04-27
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-287
Description
Huawei AR3200 products with versions of V200R007C00SPC900, V200R007C00SPCa00, V200R007C00SPCb00, V200R007C00SPCc00, V200R009C00SPC500 have an improper authentication vulnerability. Attackers need to perform some operations to exploit the vulnerability. Successful exploit may obtain certain permissions on the device.
Affected configurations
• huawei ar3200 firmware v200r007c00spc900
• huawei ar3200 firmware v200r007c00spca00
• huawei ar3200 firmware v200r007c00spcb00
• huawei ar3200 firmware v200r007c00spcc00
• huawei ar3200 firmware v200r009c00spc500
Related
Weakness · CWE (1)
- CWE-287 Improper Authentication weakness