6.5

CVE-2020-9071

There is a few bytes out-of-bounds read vulnerability in some Huawei products. The software reads data past the end of the intended buffer when parsing certain message, an authenticated attacker could exploit this vulnerability by sending crafted messages to the device. Successful exploit may cause service abnormal in specific scenario.Affected product versions include:AR120-S versions V200R007C00SPC900,V200R007C00SPCa00
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Huawei ≫ Ar120-s Firmware Version v200r007c00spc900
   Huawei ≫ Ar120-s Version -
Huawei ≫ Ar120-s Firmware Version v200r007c00spca00
   Huawei ≫ Ar120-s Version -
Huawei ≫ Ar120-s Firmware Version v200r007c00spcb00
   Huawei ≫ Ar120-s Version -
Huawei ≫ Ar120-s Firmware Version v200r007c00spcc00
   Huawei ≫ Ar120-s Version -
Huawei ≫ Ar1200 Firmware Version v200r007c00spc900
   Huawei ≫ Ar1200 Version -
Huawei ≫ Ar1200 Firmware Version v200r007c00spc900pwe
   Huawei ≫ Ar1200 Version -
Huawei ≫ Ar1200 Firmware Version v200r007c00spca00
   Huawei ≫ Ar1200 Version -
Huawei ≫ Ar1200 Firmware Version v200r007c00spcb00
   Huawei ≫ Ar1200 Version -
Huawei ≫ Ar1200 Firmware Version v200r007c00spcb00pwe
   Huawei ≫ Ar1200 Version -
Huawei ≫ Ar1200 Firmware Version v200r007c00spcc00
   Huawei ≫ Ar1200 Version -
Huawei ≫ Ar1200-s Firmware Version v200r007c00spc900
   Huawei ≫ Ar1200-s Version -
Huawei ≫ Ar1200-s Firmware Version v200r007c00spcb00
   Huawei ≫ Ar1200-s Version -
Huawei ≫ Ar1200-s Firmware Version v200r007c00spcc00
   Huawei ≫ Ar1200-s Version -
Huawei ≫ Ar150 Firmware Version v200r007c00spc900
   Huawei ≫ Ar150 Version -
Huawei ≫ Ar150 Firmware Version v200r007c00spc900pwe
   Huawei ≫ Ar150 Version -
Huawei ≫ Ar150 Firmware Version v200r007c00spcb00
   Huawei ≫ Ar150 Version -
Huawei ≫ Ar150 Firmware Version v200r007c00spcb00pwe
   Huawei ≫ Ar150 Version -
Huawei ≫ Ar150 Firmware Version v200r007c00spcc00
   Huawei ≫ Ar150 Version -
Huawei ≫ Ar150-s Firmware Version v200r007c00spc900
   Huawei ≫ Ar150-s Version -
Huawei ≫ Ar150-s Firmware Version v200r007c00spcb00
   Huawei ≫ Ar150-s Version -
Huawei ≫ Ar150-s Firmware Version v200r007c00spcc00
   Huawei ≫ Ar150-s Version -
Huawei ≫ Ar160 Firmware Version v200r007c00spc900
   Huawei ≫ Ar160 Version -
Huawei ≫ Ar160 Firmware Version v200r007c00spc900pwe
   Huawei ≫ Ar160 Version -
Huawei ≫ Ar160 Firmware Version v200r007c00spcb00
   Huawei ≫ Ar160 Version -
Huawei ≫ Ar160 Firmware Version v200r007c00spcb00pwe
   Huawei ≫ Ar160 Version -
Huawei ≫ Ar160 Firmware Version v200r007c00spcc00
   Huawei ≫ Ar160 Version -
Huawei ≫ Ar200 Firmware Version v200r007c00spc900
   Huawei ≫ Ar200 Version -
Huawei ≫ Ar200 Firmware Version v200r007c00spc900pwe
   Huawei ≫ Ar200 Version -
Huawei ≫ Ar200 Firmware Version v200r007c00spcb00
   Huawei ≫ Ar200 Version -
Huawei ≫ Ar200 Firmware Version v200r007c00spcb00pwe
   Huawei ≫ Ar200 Version -
Huawei ≫ Ar200 Firmware Version v200r007c00spcc00
   Huawei ≫ Ar200 Version -
Huawei ≫ Ar200-s Firmware Version v200r007c00spc900
   Huawei ≫ Ar200-s Version -
Huawei ≫ Ar200-s Firmware Version v200r007c00spcb00
   Huawei ≫ Ar200-s Version -
Huawei ≫ Ar200-s Firmware Version v200r007c00spcc00
   Huawei ≫ Ar200-s Version -
Huawei ≫ Ar2200 Firmware Version v200r007c00spc900
   Huawei ≫ Ar2200 Version -
Huawei ≫ Ar2200 Firmware Version v200r007c00spc900pwe
   Huawei ≫ Ar2200 Version -
Huawei ≫ Ar2200 Firmware Version v200r007c00spca00
   Huawei ≫ Ar2200 Version -
Huawei ≫ Ar2200 Firmware Version v200r007c00spcb00
   Huawei ≫ Ar2200 Version -
Huawei ≫ Ar2200 Firmware Version v200r007c00spcb00pwe
   Huawei ≫ Ar2200 Version -
Huawei ≫ Ar2200 Firmware Version v200r007c00spcc00
   Huawei ≫ Ar2200 Version -
Huawei ≫ Ar2200-s Firmware Version v200r007c00spc900
   Huawei ≫ Ar2200-s Version -
Huawei ≫ Ar2200-s Firmware Version v200r007c00spcb00
   Huawei ≫ Ar2200-s Version -
Huawei ≫ Ar2200-s Firmware Version v200r007c00spcc00
   Huawei ≫ Ar2200-s Version -
Huawei ≫ Ar3200 Firmware Version v200r007c00
   Huawei ≫ Ar3200 Version -
Huawei ≫ Ar3200 Firmware Version v200r007c00spc900
   Huawei ≫ Ar3200 Version -
Huawei ≫ Ar3200 Firmware Version v200r007c00spc900pwe
   Huawei ≫ Ar3200 Version -
Huawei ≫ Ar3200 Firmware Version v200r007c00spca00
   Huawei ≫ Ar3200 Version -
Huawei ≫ Ar3200 Firmware Version v200r007c00spcb00
   Huawei ≫ Ar3200 Version -
Huawei ≫ Ar3200 Firmware Version v200r007c00spcb00pwe
   Huawei ≫ Ar3200 Version -
Huawei ≫ Ar3200 Firmware Version v200r007c00spcc00
   Huawei ≫ Ar3200 Version -
Huawei ≫ Ar3600 Firmware Version v200r007c00spc900
   Huawei ≫ Ar3600 Version -
Huawei ≫ Ar3600 Firmware Version v200r007c00spc900pwe
   Huawei ≫ Ar3600 Version -
Huawei ≫ Ar3600 Firmware Version v200r007c00spcb00
   Huawei ≫ Ar3600 Version -
Huawei ≫ Ar3600 Firmware Version v200r007c00spcb00pwe
   Huawei ≫ Ar3600 Version -
Huawei ≫ Ar3600 Firmware Version v200r007c00spcc00
   Huawei ≫ Ar3600 Version -
Huawei ≫ Ar510 Firmware Version v200r007c00spc900
   Huawei ≫ Ar510 Version -
Huawei ≫ Netengine16ex Firmware Version v200r007c00spc900
   Huawei ≫ Netengine16ex Version -
Huawei ≫ Netengine16ex Firmware Version v200r007c00spcb00
   Huawei ≫ Netengine16ex Version -
Huawei ≫ Netengine16ex Firmware Version v200r007c00spcc00
   Huawei ≫ Netengine16ex Version -
Huawei ≫ Srg1300 Firmware Version v200r007c00spc900
   Huawei ≫ Srg1300 Version -
Huawei ≫ Srg1300 Firmware Version v200r007c00spcb00
   Huawei ≫ Srg1300 Version -
Huawei ≫ Srg1300 Firmware Version v200r007c00spcc00
   Huawei ≫ Srg1300 Version -
Huawei ≫ Srg2300 Firmware Version v200r007c00spc900
   Huawei ≫ Srg2300 Version -
Huawei ≫ Srg2300 Firmware Version v200r007c00spcb00
   Huawei ≫ Srg2300 Version -
Huawei ≫ Srg2300 Firmware Version v200r007c00spcc00
   Huawei ≫ Srg2300 Version -
Huawei ≫ Srg3300 Firmware Version v200r007c00spc900
   Huawei ≫ Srg3300 Version -
Huawei ≫ Srg3300 Firmware Version v200r007c00spcb00
   Huawei ≫ Srg3300 Version -
Huawei ≫ Srg3300 Firmware Version v200r007c00spcc00
   Huawei ≫ Srg3300 Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.63% 0.456
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 6.5 2.8 3.6
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
NIST 4 8 2.9
AV:N/AC:L/Au:S/C:N/I:N/A:P
CWE-125 Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200415-01-oob-en
Vendor Advisory