CVE-2020-9086

Severity: medium (CVSS 4.3 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2024-12-27 · updated 2026-06-17
Weakness: CWE-124

Description

There is a buffer error vulnerability in some Huawei product. An unauthenticated attacker may send special UPNP message to the affected products. Due to insufficient input validation of some value, successful exploit may cause some service abnormal. (Vulnerability ID: HWPSIRT-2017-08234) This vulnerability has been assigned a Common Vulnerabilities and Exposures (CVE) ID: CVE-2020-9086.

Affected products

HUAWEI 4G Router B612: b612s-25dtcpu-v100r001b192d03sp00c234, b612s-25dtcpu-v100r001b192d03sp00c287, b612s-25dtcpu-v100r001b192d05sp00c00

References

https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200826-01-buffer_en

Get alerted when CVE-2020-9086 or the next vulnerability affects your stack