CVE-2020-9071

🗓️ 01 Jun 2020 14:02:46Reported by huaweiType

Huawei products bytes out-of-bounds read vulnerability

Reporter	Title	Published	Views	Family All 8
CNVD	Multiple Huawei products cross-border read vulnerability (CNVD-2020-28979)	28 Apr 202000:00	–	cnvd
Cvelist	CVE-2020-9071	1 Jun 202014:02	–	cvelist
EUVD	EUVD-2020-29900	7 Oct 202500:30	–	euvd
Huawei	Security Advisory - Out of Bounds Read Vulnerability in Some Huawei Products	15 Apr 202000:00	–	huawei
NVD	CVE-2020-9071	1 Jun 202015:15	–	nvd
OSV	CVE-2020-9071	1 Jun 202015:15	–	osv
Prion	Out-of-bounds	1 Jun 202015:15	–	prion
RedhatCVE	CVE-2020-9071	22 May 202516:53	–	redhatcve

NVD

Vulners

Node

huawei ar120-s_firmwareMatchv200r007c00spc900

huawei ar120-s_firmwareMatchv200r007c00spca00

huawei ar120-s_firmwareMatchv200r007c00spcb00

huawei ar120-s_firmwareMatchv200r007c00spcc00

AND

huawei ar120-sMatch-

Node

huawei ar1200_firmwareMatchv200r007c00spc900

huawei ar1200_firmwareMatchv200r007c00spc900pwe

huawei ar1200_firmwareMatchv200r007c00spca00

huawei ar1200_firmwareMatchv200r007c00spcb00

huawei ar1200_firmwareMatchv200r007c00spcb00pwe

huawei ar1200_firmwareMatchv200r007c00spcc00

AND

huawei ar1200Match-

Node

huawei ar1200-s_firmwareMatchv200r007c00spc900

huawei ar1200-s_firmwareMatchv200r007c00spcb00

huawei ar1200-s_firmwareMatchv200r007c00spcc00

AND

huawei ar1200-sMatch-

Node

huawei ar150_firmwareMatchv200r007c00spc900

huawei ar150_firmwareMatchv200r007c00spc900pwe

huawei ar150_firmwareMatchv200r007c00spcb00

huawei ar150_firmwareMatchv200r007c00spcb00pwe

huawei ar150_firmwareMatchv200r007c00spcc00

AND

huawei ar150Match-

Node

huawei ar150-s_firmwareMatchv200r007c00spc900

huawei ar150-s_firmwareMatchv200r007c00spcb00

huawei ar150-s_firmwareMatchv200r007c00spcc00

AND

huawei ar150-sMatch-

Node

huawei ar160_firmwareMatchv200r007c00spc900

huawei ar160_firmwareMatchv200r007c00spc900pwe

huawei ar160_firmwareMatchv200r007c00spcb00

huawei ar160_firmwareMatchv200r007c00spcb00pwe

huawei ar160_firmwareMatchv200r007c00spcc00

AND

huawei ar160Match-

Node

huawei ar200_firmwareMatchv200r007c00spc900

huawei ar200_firmwareMatchv200r007c00spc900pwe

huawei ar200_firmwareMatchv200r007c00spcb00

huawei ar200_firmwareMatchv200r007c00spcb00pwe

huawei ar200_firmwareMatchv200r007c00spcc00

AND

huawei ar200Match-

Node

huawei ar200-s_firmwareMatchv200r007c00spc900

huawei ar200-s_firmwareMatchv200r007c00spcb00

huawei ar200-s_firmwareMatchv200r007c00spcc00

AND

huawei ar200-sMatch-

Node

huawei ar2200_firmwareMatchv200r007c00spc900

huawei ar2200_firmwareMatchv200r007c00spc900pwe

huawei ar2200_firmwareMatchv200r007c00spca00

huawei ar2200_firmwareMatchv200r007c00spcb00

huawei ar2200_firmwareMatchv200r007c00spcb00pwe

huawei ar2200_firmwareMatchv200r007c00spcc00

AND

huawei ar2200Match-

Node

huawei ar2200-s_firmwareMatchv200r007c00spc900

huawei ar2200-s_firmwareMatchv200r007c00spcb00

huawei ar2200-s_firmwareMatchv200r007c00spcc00

AND

huawei ar2200-sMatch-

Node

huawei ar3200_firmwareMatchv200r007c00

huawei ar3200_firmwareMatchv200r007c00spc900

huawei ar3200_firmwareMatchv200r007c00spc900pwe

huawei ar3200_firmwareMatchv200r007c00spca00

huawei ar3200_firmwareMatchv200r007c00spcb00

huawei ar3200_firmwareMatchv200r007c00spcb00pwe

huawei ar3200_firmwareMatchv200r007c00spcc00

AND

huawei ar3200Match-

Node

huawei ar3600_firmwareMatchv200r007c00spc900

huawei ar3600_firmwareMatchv200r007c00spc900pwe

huawei ar3600_firmwareMatchv200r007c00spcb00

huawei ar3600_firmwareMatchv200r007c00spcb00pwe

huawei ar3600_firmwareMatchv200r007c00spcc00

AND

huawei ar3600Match-

Node

huawei ar510_firmwareMatchv200r007c00spc900

AND

huawei ar510Match-

Node

huawei netengine16ex_firmwareMatchv200r007c00spc900

huawei netengine16ex_firmwareMatchv200r007c00spcb00

huawei netengine16ex_firmwareMatchv200r007c00spcc00

AND

huawei netengine16exMatch-

Node

huawei srg1300_firmwareMatchv200r007c00spc900

huawei srg1300_firmwareMatchv200r007c00spcb00

huawei srg1300_firmwareMatchv200r007c00spcc00

AND

huawei srg1300Match-

Node

huawei srg2300_firmwareMatchv200r007c00spc900

huawei srg2300_firmwareMatchv200r007c00spcb00

huawei srg2300_firmwareMatchv200r007c00spcc00

AND

huawei srg2300Match-

Node

huawei srg3300_firmwareMatchv200r007c00spc900

huawei srg3300_firmwareMatchv200r007c00spcb00

huawei srg3300_firmwareMatchv200r007c00spcc00

AND

huawei srg3300Match-

[
  {
    "product": "AR120-S;AR1200;AR1200-S;AR150;AR150-S;AR160;AR200;AR200-S;AR2200;AR2200-S;AR3200;AR3600;AR510;NetEngine16EX;SRG1300;SRG2300;SRG3300",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "V200R007C00SPC900,V200R007C00SPCa00,V200R007C00SPCb00,V200R007C00SPCc00"
      },
      {
        "status": "affected",
        "version": "V200R007C00SPC900,V200R007C00SPC900PWE,V200R007C00SPCa00,V200R007C00SPCb00,V200R007C00SPCb00PWE,V200R007C00SPCc00"
      },
      {
        "status": "affected",
        "version": "V200R007C00SPC900,V200R007C00SPCb00,V200R007C00SPCc00"
      },
      {
        "status": "affected",
        "version": "V200R007C00SPC900,V200R007C00SPC900PWE,V200R007C00SPCb00,V200R007C00SPCb00PWE,V200R007C00SPCc00"
      },
      {
        "status": "affected",
        "version": "V200R007C00,V200R007C00SPC900,V200R007C00SPC900PWE,V200R007C00SPCa00,V200R007C00SPCb00,V200R007C00SPCb00PWE,V200R007C00SPCc00"
      },
      {
        "status": "affected",
        "version": "V200R007C00SPC900"
      },
      {
        "status": "affected",
        "version": "V200R007C00SPC900,V200R007C00SPCb00,V200R007C00SPCc00."
      }
    ]
  }
]

Source	Link
huawei	www.huawei.com/en/psirt/security-advisories/huawei-sa-20200415-01-oob-en

21 Nov 2024 05:39Current

6.3Medium risk

Vulners AI Score6.3

CVSS 24

CVSS 3.16.5

EPSS0.00166

CWE-125