3.3

CVE-2020-9102

There is a information leak vulnerability in some Huawei products, and it could allow a local attacker to get information. The vulnerability is due to the improper management of the username. An attacker with the ability to access the device and cause the username information leak. Affected product versions include: CloudEngine 12800 versions V200R002C50SPC800, V200R003C00SPC810, V200R005C00SPC800, V200R005C10SPC800, V200R019C00SPC800; CloudEngine 5800 versions V200R002C50SPC800, V200R003C00SPC810, V200R005C00SPC800, V200R005C10SPC800, V200R019C00SPC800; CloudEngine 6800 versions V200R002C50SPC800, V200R003C00SPC810, V200R005C00SPC800, V200R005C10SPC800, V200R005C20SPC800, V200R019C00SPC800; CloudEngine 7800 versions V200R002C50SPC800, V200R003C00SPC810, V200R005C00SPC800, V200R005C10SPC800, V200R019C00SPC800
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Huawei ≫ Cloudengine 12800 Firmware Version v200r002c50spc800
   Huawei ≫ Cloudengine 12800 Version -
Huawei ≫ Cloudengine 12800 Firmware Version v200r003c00spc810
   Huawei ≫ Cloudengine 12800 Version -
Huawei ≫ Cloudengine 12800 Firmware Version v200r005c00spc800
   Huawei ≫ Cloudengine 12800 Version -
Huawei ≫ Cloudengine 12800 Firmware Version v200r005c10spc800
   Huawei ≫ Cloudengine 12800 Version -
Huawei ≫ Cloudengine 12800 Firmware Version v200r019c00spc800
   Huawei ≫ Cloudengine 12800 Version -
Huawei ≫ Cloudengine 5800 Firmware Version v200r002c50spc800
   Huawei ≫ Cloudengine 5800 Version -
Huawei ≫ Cloudengine 5800 Firmware Version v200r003c00spc810
   Huawei ≫ Cloudengine 5800 Version -
Huawei ≫ Cloudengine 5800 Firmware Version v200r005c00spc800
   Huawei ≫ Cloudengine 5800 Version -
Huawei ≫ Cloudengine 5800 Firmware Version v200r005c10spc800
   Huawei ≫ Cloudengine 5800 Version -
Huawei ≫ Cloudengine 5800 Firmware Version v200r019c00spc800
   Huawei ≫ Cloudengine 5800 Version -
Huawei ≫ Cloudengine 6800 Firmware Version v200r002c50spc800
   Huawei ≫ Cloudengine 6800 Version -
Huawei ≫ Cloudengine 6800 Firmware Version v200r003c00spc810
   Huawei ≫ Cloudengine 6800 Version -
Huawei ≫ Cloudengine 6800 Firmware Version v200r005c00spc800
   Huawei ≫ Cloudengine 6800 Version -
Huawei ≫ Cloudengine 6800 Firmware Version v200r005c10spc800
   Huawei ≫ Cloudengine 6800 Version -
Huawei ≫ Cloudengine 6800 Firmware Version v200r005c20spc800
   Huawei ≫ Cloudengine 6800 Version -
Huawei ≫ Cloudengine 6800 Firmware Version v200r019c00spc800
   Huawei ≫ Cloudengine 6800 Version -
Huawei ≫ Cloudengine 7800 Firmware Version v200r002c50spc800
   Huawei ≫ Cloudengine 7800 Version -
Huawei ≫ Cloudengine 7800 Firmware Version v200r003c00spc810
   Huawei ≫ Cloudengine 7800 Version -
Huawei ≫ Cloudengine 7800 Firmware Version v200r005c00spc800
   Huawei ≫ Cloudengine 7800 Version -
Huawei ≫ Cloudengine 7800 Firmware Version v200r005c10spc800
   Huawei ≫ Cloudengine 7800 Version -
Huawei ≫ Cloudengine 7800 Firmware Version v200r019c00spc800
   Huawei ≫ Cloudengine 7800 Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.2% 0.098
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 3.3 1.8 1.4
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
NIST 2.1 3.9 2.9
AV:L/AC:L/Au:N/C:P/I:N/A:N
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200715-03-informationleak-en
Vendor Advisory