CVE-2020-9069 : There is an information leakage vulnerability in some Huawei products. An unauth

There is an information leakage vulnerability in some Huawei products. An unauthenticated, adjacent attacker could exploit this vulnerability to decrypt data. Successful exploitation may leak information randomly. Affected product versions include: Anne-AL00 Versions earlier than 9.1.0.331(C675E9R1P3T8); Berkeley-L09 Versions earlier than 10.0.1.1(C675R1); CD16-10 Versions earlier than 10.0.2.8; CD17-10 Versions earlier than 10.0.2.8; CD17-16 Versions earlier than 10.0.2.8; CD18-10 Versions earlier than 10.0.2.8; CD18-16 Versions earlier than 10.0.2.8; Columbia-TL00B Versions earlier than 9.0.0.187(C01E181R1P20T8); E6878-370 Versions earlier than 10.0.5.1(H610SP10C00); HUAWEI P30 lite Versions earlier than 10.0.0.185(C605E3R1P3), Versions earlier than 10.0.0.197(C432E8R2P7); HUAWEI nova 4e Versions earlier than 10.0.0.158(C00E64R1P9); Honor 10 Lite 9.0.1.113(C675E11R1P12); LelandP-L22A Versions earlier than 9.1.0.166(C675E5R1P4T8); Marie-AL00AX Versions earlier than 10.0.0.158(C00E64R1P9); Marie-AL00AY Versions earlier than 10.0.0.158(C00E64R1P9); Marie-AL00BX Versions earlier than 10.0.0.158(C00E64R1P9); Marie-L03BX Versions earlier than 10.0.0.188(C605E5R1P1); Marie-L21BX Versions earlier than 10.0.0.188(C432E4R4P1), Versions earlier than 10.0.0.188(C461E5R3P1); Marie-L22BX Versions earlier than 10.0.0.188(C636E3R3P1); Marie-L23BX Versions earlier than 10.0.0.188(C605E5R1P1); TC5200-16 Versions earlier than 10.0.2.8; WS5200-11 Versions earlier than 10.0.2.8; WS5200-12 Versions earlier than 10.0.2.23; WS5200-16 Versions earlier than 10.0.2.8; WS5200-17 Versions earlier than 10.0.2.23; WS5800-10 Versions earlier than 10.0.3.27; WS6500-10 Versions earlier than 10.0.2.8; WS6500-16 Versions earlier than 10.0.2.8

Published 2020-05-21 15:15:10

Updated 2021-07-21 11:39:24

Source Huawei Technologies

View at NVD, CVE.org

Products affected by CVE-2020-9069

Huawei » Anne-al00 Firmware
Versions before (<) 9.1.0.331\(c675e9r1p3t8\)
cpe:2.3:o:huawei:anne-al00_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » Anne-al00 » Version: N/A
Huawei » Berkeley-l09 Firmware
Versions before (<) 10.0.1.1\(c675r1\)
cpe:2.3:o:huawei:berkeley-l09_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » Berkeley-l09 » Version: N/A
Huawei » Honor 10 Lite Firmware
Versions before (<) 10.0.0.182\(c675e17r2p2\)
cpe:2.3:o:huawei:honor_10_lite_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » Honor 10 Lite » Version: N/A
Huawei » Cd16-10 Firmware
Versions before (<) 10.0.2.8
cpe:2.3:o:huawei:cd16-10_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » Cd16-10 » Version: N/A
Huawei » Cd17-10 Firmware
Versions before (<) 10.0.2.8
cpe:2.3:o:huawei:cd17-10_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » Cd17-10 » Version: N/A
Huawei » Cd18-10 Firmware
Versions before (<) 10.0.2.8
cpe:2.3:o:huawei:cd18-10_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » Cd18-10 » Version: N/A
Huawei » Ws5200-11 Firmware
Versions before (<) 10.0.2.23
cpe:2.3:o:huawei:ws5200-11_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » Ws5200-11 » Version: N/A
Huawei » Ws5200-11 Firmware
Versions before (<) 10.0.2.8
cpe:2.3:o:huawei:ws5200-11_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » Ws5200-11 » Version: N/A
Huawei » Ws6500-10 Firmware
Versions before (<) 10.0.2.8
cpe:2.3:o:huawei:ws6500-10_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » Ws6500-10 » Version: N/A
Huawei » E6878-370 Firmware
Versions before (<) 10.0.5.1\(h610sp10c00\)
cpe:2.3:o:huawei:e6878-370_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » E6878-370 » Version: N/A
Huawei » Cd17-16 Firmware
Versions before (<) 10.0.2.8
cpe:2.3:o:huawei:cd17-16_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » Cd17-16 » Version: N/A
Huawei » Cd18-16 Firmware
Versions before (<) 10.0.2.8
cpe:2.3:o:huawei:cd18-16_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » Cd18-16 » Version: N/A
Huawei » Columbia-tl00b Firmware
Versions before (<) 9.0.0.187\(c01e181r1p20t8\)
cpe:2.3:o:huawei:columbia-tl00b_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » Columbia-tl00b » Version: N/A
Huawei » Lelandp-l22a Firmware
Versions before (<) 9.1.0.166\(c675e5r1p4t8\)
cpe:2.3:o:huawei:lelandp-l22a_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » Lelandp-l22a » Version: N/A
Huawei » Tc5200-16 Firmware
Versions before (<) 10.0.2.8
cpe:2.3:o:huawei:tc5200-16_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » Tc5200-16 » Version: N/A
Huawei » Ws5200-16 Firmware
Versions before (<) 10.0.2.8
cpe:2.3:o:huawei:ws5200-16_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » Ws5200-16 » Version: N/A
Huawei » Ws5200-17 Firmware
Versions before (<) 10.0.2.23
cpe:2.3:o:huawei:ws5200-17_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » Ws5200-17 » Version: N/A
Huawei » Ws5800-10 Firmware
Versions before (<) 10.0.3.27
cpe:2.3:o:huawei:ws5800-10_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » Ws5800-10 » Version: N/A
Huawei » Ws6500-16 Firmware
Versions before (<) 10.0.2.8
cpe:2.3:o:huawei:ws6500-16_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Huawei » Ws6500-16 » Version: N/A

Exploit prediction scoring system (EPSS) score for CVE-2020-9069

EPSS FAQ

0.04%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 10 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2020-9069

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
3.3	LOW	AV:A/AC:L/Au:N/C:P/I:N/A:N	6.5	2.9	NIST
Access Vector: Adjacent Network Access Complexity: Low Authentication: None Confidentiality Impact: Partial Integrity Impact: None Availability Impact: None
6.5	MEDIUM	CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N	2.8	3.6	NIST
Attack Vector: Adjacent Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: High Integrity: None Availability: None

References for CVE-2020-9069

https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200520-01-leakage-en

Security Advisory - Information Leakage Vulnerability in Some Huawei Products
Vendor Advisory

Jump to

Vulnerability Details : CVE-2020-9069

Products affected by CVE-2020-9069

Exploit prediction scoring system (EPSS) score for CVE-2020-9069

CVSS scores for CVE-2020-9069

References for CVE-2020-9069