Lucene search

HuaweiCVE-2020-9241

HistoryAug 17, 2020 - 4:15 p.m.

CVE-2020-9241

2020-08-1716:15:14

huawei

web.nvd.nist.gov

huawei

wifi

e6878-370

authorization

vulnerability

nvd

cve-2020-9241

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H

AI Score

6.8

Confidence

High

EPSS

0.001

Percentile

42.5%

JSON

Huawei 5G Mobile WiFi E6878-370 with versions of 10.0.3.1(H563SP1C00),10.0.3.1(H563SP21C233) have an improper authorization vulnerability. The device does not restrict certain data received from WAN port. Successful exploit could allow an attacker at WAN side to manage certain service of the device.

Affected configurations

Nvd

Vulners

Node

huaweie6878-370_firmwareMatch10.0.3.1\(h563sp1c00\)

huaweie6878-370_firmwareMatch10.0.3.1\(h563sp21c233\)

AND

huaweie6878-370Match-

VendorProductVersionCPE
huaweie6878-370_firmware10.0.3.1(h563sp1c00)cpe:2.3:o:huawei:e6878-370_firmware:10.0.3.1\(h563sp1c00\):*:*:*:*:*:*:*
huaweie6878-370_firmware10.0.3.1(h563sp21c233)cpe:2.3:o:huawei:e6878-370_firmware:10.0.3.1\(h563sp21c233\):*:*:*:*:*:*:*
huaweie6878-370-cpe:2.3:h:huawei:e6878-370:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
huawei	e6878-370_firmware	10.0.3.1(h563sp1c00)	cpe:2.3:o:huawei:e6878-370_firmware:10.0.3.1\(h563sp1c00\):::::::*
huawei	e6878-370_firmware	10.0.3.1(h563sp21c233)	cpe:2.3:o:huawei:e6878-370_firmware:10.0.3.1\(h563sp21c233\):::::::*
huawei	e6878-370	-	cpe:2.3:h:huawei:e6878-370:-:::::::*

CNA Affected

[
  {
    "product": "E6878-370",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "10.0.3.1(H563SP1C00),10.0.3.1(H563SP21C233)"
      }
    ]
  }
]

References

www.huawei.com/en/psirt/security-advisories/huawei-sa-20200812-01-auth-en

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H

AI Score

6.8

Confidence

High

EPSS

0.001

Percentile

42.5%

JSON

Related for CVE-2020-9241