Lucene search

HuaweiCVE-2020-9122

HistoryOct 12, 2020 - 2:15 p.m.

CVE-2020-9122

2020-10-1214:15:14

CWE-20

huawei

web.nvd.nist.gov

huawei

lan

input verification

vulnerability

nvd

cve-2020-9122

CVSS2

3.3

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:A/AC:L/Au:N/C:N/I:N/A:P

CVSS3

6.5

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

6.4

Confidence

High

EPSS

0.001

Percentile

25.0%

JSON

Some Huawei products have an insufficient input verification vulnerability. Attackers can exploit this vulnerability in the LAN to cause service abnormal on affected devices.Affected product versions include:HiRouter-CD30-10 version 10.0.2.5;HiRouter-CT31-10 version 10.0.2.20;WS5200-12 version 10.0.1.9;WS5281-10 version 10.0.5.10;WS5800-10 version 10.0.3.25;WS7100-10 version 10.0.5.21;WS7200-10 version 10.0.5.21.

Affected configurations

Nvd

Vulners

Node

huaweihirouter-cd30-10Match-

AND

huaweihirouter-cd30-10_firmwareRange10.0.2.5–10.0.5.7

Node

huaweihirouter-ct31-10Match-

AND

huaweihirouter-ct31-10_firmwareRange10.0.2.20–10.0.2.37

Node

huaweiws5200-12Match-

AND

huaweiws5200-12_firmwareRange10.0.1.9–10.0.5.6

Node

huaweiws5281-10Match-

AND

huaweiws5281-10_firmwareRange10.0.5.10–10.0.5.32

Node

huaweiws5800-10Match-

AND

huaweiws5800-10_firmwareRange10.0.3.25–10.0.3.33

Node

huaweiws7100-10Match-

AND

huaweiws7100-10_firmwareRange10.0.5.21–10.0.5.37

Node

huaweiws7200-10Match-

AND

huaweiws7200-10_firmwareRange10.0.5.21–10.0.5.37

VendorProductVersionCPE
huaweihirouter-cd30-10-cpe:2.3:h:huawei:hirouter-cd30-10:-:*:*:*:*:*:*:*
huaweihirouter-cd30-10_firmware*cpe:2.3:o:huawei:hirouter-cd30-10_firmware:*:*:*:*:*:*:*:*
huaweihirouter-ct31-10-cpe:2.3:h:huawei:hirouter-ct31-10:-:*:*:*:*:*:*:*
huaweihirouter-ct31-10_firmware*cpe:2.3:o:huawei:hirouter-ct31-10_firmware:*:*:*:*:*:*:*:*
huaweiws5200-12-cpe:2.3:h:huawei:ws5200-12:-:*:*:*:*:*:*:*
huaweiws5200-12_firmware*cpe:2.3:o:huawei:ws5200-12_firmware:*:*:*:*:*:*:*:*
huaweiws5281-10-cpe:2.3:h:huawei:ws5281-10:-:*:*:*:*:*:*:*
huaweiws5281-10_firmware*cpe:2.3:o:huawei:ws5281-10_firmware:*:*:*:*:*:*:*:*
huaweiws5800-10-cpe:2.3:h:huawei:ws5800-10:-:*:*:*:*:*:*:*
huaweiws5800-10_firmware*cpe:2.3:o:huawei:ws5800-10_firmware:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
huawei	hirouter-cd30-10	-	cpe:2.3:h:huawei:hirouter-cd30-10:-:::::::*
huawei	hirouter-cd30-10_firmware	*	cpe:2.3:o:huawei:hirouter-cd30-10_firmware::::::::
huawei	hirouter-ct31-10	-	cpe:2.3:h:huawei:hirouter-ct31-10:-:::::::*
huawei	hirouter-ct31-10_firmware	*	cpe:2.3:o:huawei:hirouter-ct31-10_firmware::::::::
huawei	ws5200-12	-	cpe:2.3:h:huawei:ws5200-12:-:::::::*
huawei	ws5200-12_firmware	*	cpe:2.3:o:huawei:ws5200-12_firmware::::::::
huawei	ws5281-10	-	cpe:2.3:h:huawei:ws5281-10:-:::::::*
huawei	ws5281-10_firmware	*	cpe:2.3:o:huawei:ws5281-10_firmware::::::::
huawei	ws5800-10	-	cpe:2.3:h:huawei:ws5800-10:-:::::::*
huawei	ws5800-10_firmware	*	cpe:2.3:o:huawei:ws5800-10_firmware::::::::

Rows per page:

1-10 of 141

CNA Affected

[
  {
    "product": "HiRouter-CD30-10;HiRouter-CT31-10;WS5200-12;WS5281-10;WS5800-10;WS7100-10;WS7200-10",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "10.0.2.5"
      },
      {
        "status": "affected",
        "version": "10.0.2.20"
      },
      {
        "status": "affected",
        "version": "10.0.1.9"
      },
      {
        "status": "affected",
        "version": "10.0.5.10"
      },
      {
        "status": "affected",
        "version": "10.0.3.25"
      },
      {
        "status": "affected",
        "version": "10.0.5.21"
      }
    ]
  }
]

References

www.huawei.com/en/psirt/security-advisories/huawei-sa-20200930-01-verification-en

CVSS2

3.3

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:A/AC:L/Au:N/C:N/I:N/A:P

CVSS3

6.5

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

6.4

Confidence

High

EPSS

0.001

Percentile

25.0%

JSON

Related for CVE-2020-9122