8
CVE-2020-9067
- EPSS 0.62%
- Veröffentlicht 02.04.2020 21:15:13
- Zuletzt bearbeitet 21.11.2024 05:39:57
- Erkennungen
LoginThere is a buffer overflow vulnerability in some Huawei products. The vulnerability can be exploited by an attacker to perform remote code execution on the affected products when the affected product functions as an optical line terminal (OLT). Affected product versions include:SmartAX MA5600T versions V800R013C10, V800R015C00, V800R015C10, V800R017C00, V800R017C10, V800R018C00, V800R018C10; SmartAX MA5800 versions V100R017C00, V100R017C10, V100R018C00, V100R018C10, V100R019C10; SmartAX EA5800 versions V100R018C00, V100R018C10, V100R019C10.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Huawei ≫ Smartax Ma5600t Firmware Version v800r013c10
Huawei ≫ Smartax Ma5600t Firmware Version v800r015c00
Huawei ≫ Smartax Ma5600t Firmware Version v800r015c10
Huawei ≫ Smartax Ma5600t Firmware Version v800r017c00
Huawei ≫ Smartax Ma5600t Firmware Version v800r017c10
Huawei ≫ Smartax Ma5600t Firmware Version v800r018c00
Huawei ≫ Smartax Ma5600t Firmware Version v800r018c10
Huawei ≫ Smartax Ma5800 Firmware Version v100r017c00
Huawei ≫ Smartax Ma5800 Firmware Version v100r017c10
Huawei ≫ Smartax Ma5800 Firmware Version v100r018c00
Huawei ≫ Smartax Ma5800 Firmware Version v100r018c10
Huawei ≫ Smartax Ma5800 Firmware Version v100r019c10
Huawei ≫ Smartax Ea5800 Firmware Version v100r018c00
Huawei ≫ Smartax Ea5800 Firmware Version v100r018c10
Huawei ≫ Smartax Ea5800 Firmware Version v100r019c10
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.62% | 0.451 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| NIST | 8 | 2.1 | 5.9 |
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
|
| NIST | 5.2 | 5.1 | 6.4 |
AV:A/AC:L/Au:S/C:P/I:P/A:P
|
CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer.
https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200401-01-overflow-en