CVEvulnerability
CVE-2020-9071
6.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2020-06-01
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 6.5 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
- CVSS 2.0 ([email protected])
- 4.0 MEDIUM — AV:N/AC:L/Au:S/C:N/I:N/A:P
- Weaknesses
- CWE-125
Description
There is a few bytes out-of-bounds read vulnerability in some Huawei products. The software reads data past the end of the intended buffer when parsing certain message, an authenticated attacker could exploit this vulnerability by sending crafted messages to the device. Successful exploit may cause service abnormal in specific scenario.Affected product versions include:AR120-S versions V200R007C00SPC900,V200R007C00SPCa00
Affected configurations
• huawei ar120-s firmware v200r007c00spc900
• huawei ar120-s firmware v200r007c00spca00
• huawei ar120-s firmware v200r007c00spcb00
• huawei ar120-s firmware v200r007c00spcc00
• huawei ar1200 firmware v200r007c00spc900
• huawei ar1200 firmware v200r007c00spc900pwe
• huawei ar1200 firmware v200r007c00spca00
• huawei ar1200 firmware v200r007c00spcb00
• huawei ar1200 firmware v200r007c00spcb00pwe
• huawei ar1200 firmware v200r007c00spcc00
• huawei ar1200-s firmware v200r007c00spc900
• huawei ar1200-s firmware v200r007c00spcb00
• huawei ar1200-s firmware v200r007c00spcc00
• huawei ar150 firmware v200r007c00spc900
• huawei ar150 firmware v200r007c00spc900pwe
• huawei ar150 firmware v200r007c00spcb00
• huawei ar150 firmware v200r007c00spcb00pwe
• huawei ar150 firmware v200r007c00spcc00
• huawei ar150-s firmware v200r007c00spc900
• huawei ar150-s firmware v200r007c00spcb00
• huawei ar150-s firmware v200r007c00spcc00
• huawei ar160 firmware v200r007c00spc900
• huawei ar160 firmware v200r007c00spc900pwe
• huawei ar160 firmware v200r007c00spcb00
• huawei ar160 firmware v200r007c00spcb00pwe
• huawei ar160 firmware v200r007c00spcc00
• huawei ar200 firmware v200r007c00spc900
• huawei ar200 firmware v200r007c00spc900pwe
• huawei ar200 firmware v200r007c00spcb00
• huawei ar200 firmware v200r007c00spcb00pwe
• huawei ar200 firmware v200r007c00spcc00
• huawei ar200-s firmware v200r007c00spc900
• huawei ar200-s firmware v200r007c00spcb00
• huawei ar200-s firmware v200r007c00spcc00
• huawei ar2200 firmware v200r007c00spc900
• huawei ar2200 firmware v200r007c00spc900pwe
• huawei ar2200 firmware v200r007c00spca00
• huawei ar2200 firmware v200r007c00spcb00
• huawei ar2200 firmware v200r007c00spcb00pwe
• huawei ar2200 firmware v200r007c00spcc00
• huawei ar2200-s firmware v200r007c00spc900
• huawei ar2200-s firmware v200r007c00spcb00
• huawei ar2200-s firmware v200r007c00spcc00
• huawei ar3200 firmware v200r007c00
• huawei ar3200 firmware v200r007c00spc900
• huawei ar3200 firmware v200r007c00spc900pwe
• huawei ar3200 firmware v200r007c00spca00
• huawei ar3200 firmware v200r007c00spcb00
• huawei ar3200 firmware v200r007c00spcb00pwe
• huawei ar3200 firmware v200r007c00spcc00
• huawei ar3600 firmware v200r007c00spc900
• huawei ar3600 firmware v200r007c00spc900pwe
• huawei ar3600 firmware v200r007c00spcb00
• huawei ar3600 firmware v200r007c00spcb00pwe
• huawei ar3600 firmware v200r007c00spcc00
• huawei ar510 firmware v200r007c00spc900
• huawei netengine16ex firmware v200r007c00spc900
• huawei netengine16ex firmware v200r007c00spcb00
• huawei netengine16ex firmware v200r007c00spcc00
• huawei srg1300 firmware v200r007c00spc900
… and 8 more
Related
Weakness · CWE (1)
- CWE-125 Out-of-bounds Read weakness