What’s Vulnerable › Vulnerabilities
CVE-2020-9071
- Severity: medium (CVSS 6.5 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.6% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2020-06-01 · updated 2026-06-17
- Weakness: CWE-125
Description
There is a few bytes out-of-bounds read vulnerability in some Huawei products. The software reads data past the end of the intended buffer when parsing certain message, an authenticated attacker could exploit this vulnerability by sending crafted messages to the device. Successful exploit may cause service abnormal in specific scenario.Affected product versions include:AR120-S versions V200R007C00SPC900,V200R007C00SPCa00
Affected products
- Huawei Ar120-S Firmware: v200r007c00spc900, v200r007c00spca00, v200r007c00spcb00, v200r007c00spcc00
- Huawei Ar1200-S Firmware: v200r007c00spc900, v200r007c00spcb00, v200r007c00spcc00
- Huawei Ar1200 Firmware: v200r007c00spc900, v200r007c00spc900pwe, v200r007c00spca00, v200r007c00spcb00, v200r007c00spcb00pwe, v200r007c00spcc00
- Huawei Ar150-S Firmware: v200r007c00spc900, v200r007c00spcb00, v200r007c00spcc00
- Huawei Ar150 Firmware: v200r007c00spc900, v200r007c00spc900pwe, v200r007c00spcb00, v200r007c00spcb00pwe, v200r007c00spcc00
- Huawei Ar160 Firmware: v200r007c00spc900, v200r007c00spc900pwe, v200r007c00spcb00, v200r007c00spcb00pwe, v200r007c00spcc00
- Huawei Ar200-S Firmware: v200r007c00spc900, v200r007c00spcb00, v200r007c00spcc00
- Huawei Ar200 Firmware: v200r007c00spc900, v200r007c00spc900pwe, v200r007c00spcb00, v200r007c00spcb00pwe, v200r007c00spcc00
- Huawei Ar2200-S Firmware: v200r007c00spc900, v200r007c00spcb00, v200r007c00spcc00
- Huawei Ar2200 Firmware: v200r007c00spc900, v200r007c00spc900pwe, v200r007c00spca00, v200r007c00spcb00, v200r007c00spcb00pwe, v200r007c00spcc00
- Huawei AR3200: v200r007c00, v200r007c00spc900, v200r007c00spc900pwe, v200r007c00spca00, v200r007c00spcb00, v200r007c00spcb00pwe (+1)
- Huawei Ar3600 Firmware: v200r007c00spc900, v200r007c00spc900pwe, v200r007c00spcb00, v200r007c00spcb00pwe, v200r007c00spcc00
- Huawei Ar510 Firmware: v200r007c00spc900
- Huawei Netengine16Ex Firmware: v200r007c00spc900, v200r007c00spcb00, v200r007c00spcc00
- Huawei Srg1300 Firmware: v200r007c00spc900, v200r007c00spcb00, v200r007c00spcc00
- Huawei Srg2300 Firmware: v200r007c00spc900, v200r007c00spcb00, v200r007c00spcc00
- Huawei Srg3300 Firmware: v200r007c00spc900, v200r007c00spcb00, v200r007c00spcc00
References
- https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200415-01-oob-en
- https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200415-01-oob-en
Get alerted when CVE-2020-9071 or the next vulnerability affects your stack