What’s Vulnerable › Vulnerabilities

CVE-2020-9067

• Severity: high (CVSS 8.0 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.6% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2020-04-02 · updated 2026-06-17
• Weakness: CWE-120

Description

There is a buffer overflow vulnerability in some Huawei products. The vulnerability can be exploited by an attacker to perform remote code execution on the affected products when the affected product functions as an optical line terminal (OLT). Affected product versions include:SmartAX MA5600T versions V800R013C10, V800R015C00, V800R015C10, V800R017C00, V800R017C10, V800R018C00, V800R018C10; SmartAX MA5800 versions V100R017C00, V100R017C10, V100R018C00, V100R018C10, V100R019C10; SmartAX EA5800 versions V100R018C00, V100R018C10, V100R019C10.

Affected products

• Huawei Smartax Ea5800 Firmware: v100r018c00, v100r018c10, v100r019c10
• Huawei Smartax Ma5600T Firmware: v800r013c10, v800r015c00, v800r015c10, v800r017c00, v800r017c10, v800r018c00 (+1)
• Huawei Smartax Ma5800 Firmware: v100r017c00, v100r017c10, v100r018c00, v100r018c10, v100r019c10

References

• https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200401-01-overflow-en
• https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200401-01-overflow-en

Get alerted when CVE-2020-9067 or the next vulnerability affects your stack