CVEvulnerability

CVE-2020-9086

4.3 MEDIUM Published 2024-12-27 Modified 2026-06-17 Official page ↗
Status
Analyzed
Published
2024-12-27
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
4.3 MEDIUM — CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
CVSS 3.1 ([email protected])
4.3 MEDIUM — CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Weaknesses
CWE-124, CWE-787

Description

There is a buffer error vulnerability in some Huawei product. An unauthenticated attacker may send special UPNP message to the affected products. Due to insufficient input validation of some value, successful exploit may cause some service abnormal. (Vulnerability ID: HWPSIRT-2017-08234) This vulnerability has been assigned a Common Vulnerabilities and Exposures (CVE) ID: CVE-2020-9086.

Affected configurations

• huawei b612 firmware b612s-25dtcpu-v100r001b192d03sp00c234 • huawei b612 firmware b612s-25dtcpu-v100r001b192d03sp00c287 • huawei b612 firmware b612s-25dtcpu-v100r001b192d05sp00c00

Related

Weakness · CWE (2)

  • CWE-124 Buffer Underwrite weakness
  • CWE-787 Out-of-bounds Write weakness

References