CVSS: 6.5EPSS: 0%CPEs: 14EXPL: 0CVE-2020-9122
https://notcve.org/view.php?id=CVE-2020-9122
Some Huawei products have an insufficient input verification vulnerability. Attackers can exploit this vulnerability in the LAN to cause service abnormal on affected devices.Affected product versions include:HiRouter-CD30-10 version 10.0.2.5;HiRouter-CT31-10 version 10.0.2.20;WS5200-12 version 10.0.1.9;WS5281-10 version 10.0.5.10;WS5800-10 version 10.0.3.25;WS7100-10 version 10.0.5.21;WS7200-10 version 10.0.5.21. Algunos productos Huawei presentan una vulnerabilidad de verificación de entrada insuficiente. Los atacantes pueden explotar esta vulnerabilidad en la LAN para causar un servicio anormal en los dispositivos afectados. Las versiones de productos afectados incluyen: HiRouter-CD30-10 versión 10.0.2.5; HiRouter-CT31-10 versión 10.0.2.20; WS5200-12 versión 10.0.1.9; WS5281 -10 versión 10.0.5.10; WS5800-10 versión 10.0.3.25; WS7100-10 versión 10.0.5.21; WS7200-10 versión 10.0.5.21 • https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200930-01-verification-en • CWE-20: Improper Input Validation •
CVSS: 6.5EPSS: 0%CPEs: 2EXPL: 0CVE-2020-9230
https://notcve.org/view.php?id=CVE-2020-9230
WS5800-10 version 10.0.3.25 has a denial of service vulnerability. Due to improper verification of specific message, an attacker may exploit this vulnerability to cause specific function to become abnormal. El Dispositivo WS5800-10 versión 10.0.3.25, presenta una vulnerabilidad de denegación de servicio. Debido a la verificación incorrecta de un mensaje específico, un atacante puede explotar esta vulnerabilidad para causar que una función específica se vuelva anormal • https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200930-01-homerouter-en • CWE-345: Insufficient Verification of Data Authenticity •
CVSS: 6.5EPSS: 0%CPEs: 38EXPL: 0CVE-2020-9069
https://notcve.org/view.php?id=CVE-2020-9069
There is an information leakage vulnerability in some Huawei products. An unauthenticated, adjacent attacker could exploit this vulnerability to decrypt data. Successful exploitation may leak information randomly. Affected product versions include: Anne-AL00 Versions earlier than 9.1.0.331(C675E9R1P3T8); Berkeley-L09 Versions earlier than 10.0.1.1(C675R1); CD16-10 Versions earlier than 10.0.2.8; CD17-10 Versions earlier than 10.0.2.8; CD17-16 Versions earlier than 10.0.2.8; CD18-10 Versions earlier than 10.0.2.8; CD18-16 Versions earlier than 10.0.2.8; Columbia-TL00B Versions earlier than 9.0.0.187(C01E181R1P20T8); E6878-370 Versions earlier than 10.0.5.1(H610SP10C00); HUAWEI P30 lite Versions earlier than 10.0.0.185(C605E3R1P3), Versions earlier than 10.0.0.197(C432E8R2P7); HUAWEI nova 4e Versions earlier than 10.0.0.158(C00E64R1P9); Honor 10 Lite 9.0.1.113(C675E11R1P12); LelandP-L22A Versions earlier than 9.1.0.166(C675E5R1P4T8); Marie-AL00AX Versions earlier than 10.0.0.158(C00E64R1P9); Marie-AL00AY Versions earlier than 10.0.0.158(C00E64R1P9); Marie-AL00BX Versions earlier than 10.0.0.158(C00E64R1P9); Marie-L03BX Versions earlier than 10.0.0.188(C605E5R1P1); Marie-L21BX Versions earlier than 10.0.0.188(C432E4R4P1), Versions earlier than 10.0.0.188(C461E5R3P1); Marie-L22BX Versions earlier than 10.0.0.188(C636E3R3P1); Marie-L23BX Versions earlier than 10.0.0.188(C605E5R1P1); TC5200-16 Versions earlier than 10.0.2.8; WS5200-11 Versions earlier than 10.0.2.8; WS5200-12 Versions earlier than 10.0.2.23; WS5200-16 Versions earlier than 10.0.2.8; WS5200-17 Versions earlier than 10.0.2.23; WS5800-10 Versions earlier than 10.0.3.27; WS6500-10 Versions earlier than 10.0.2.8; WS6500-16 Versions earlier than 10.0.2.8 Hay una vulnerabilidad de filtrado de información en algunos productos Huawei. Un atacante adyacente no autenticado podría explotar esta vulnerabilidad para descifrar datos. • https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200520-01-leakage-en •