CVE-2020-9069

🗓️ 21 May 2020 14:19:31Reported by huaweiType

There is an information leakage vulnerability in some Huawei products. An unauthenticated, adjacent attacker could exploit this vulnerability to decrypt data. Successful exploitation may leak information randomly. Affected product versions include: Anne-AL00 Versions earlier than 9.1.0.331(C675E9R1P3T8); Berkeley-L09 Versions earlier than 10.0.1.1(C675R1); CD16-10 Versions earlier than 10.0.2.8; CD17-10 Versions earlier than 10.0.2.8; CD17-16 Versions earlier than 10.0.2.8; CD18-10 Versions earlier than 10.0.2.8; CD18-16 Versions earlier than 10.0.2.8; Columbia-TL00B Versions earlier than 9.0.0.187(C01E181R1P20T8); E6878-370 Versions earlier than 10.0.5.1(H610SP10C00); HUAWEI P30 lite Versions earlier than 10.0.0.185(C605E3R1P3), Versions earlier than 10.0.0.197(C432E8R2P7); HUAWEI nova 4e Versions earlier than 10.0.0.158(C00E64R1P9); Honor 10 Lite 9.0.1.113(C675E11R1P12); LelandP-L22A Versions earlier than 9.1.0.166(C675E5R1P4T8); Marie-AL00AX Versions earlier than 10.0.0.158(C00E64R1P9); Marie-AL00AY Versions earlier than 10.0.0.158(C00E64R1P9); Marie-AL00BX Versions earlier than 10.0.0.158(C00E64R1P9); Marie-L03BX Versions earlier than 10.0.0.188(C605E5R1P1); Marie-L21BX Versions earlier than 10.0.0.188(C432E4R4P1), Versions earlier than 10.0.0.188(C461E5R3P1); Marie-L22BX Versions earlier than 10.0.0.188(C636E3R3P1); Marie-L23BX Versions earlier than 10.0.0.188(C605E5R1P1); TC5200-16 Versions earlier than 10.0.2.8; WS5200-11 Versions earlier than 10.0.2.8; WS5200-12 Versions earlier than 10.0.2.23; WS5200-16 Versions earlier than 10.0.2.8; WS5200-17 Versions earlier than 10.0.2.23; WS5800-10 Versions earlier than 10.0.3.27; WS6500-10 Versions earlier than 10.0.2.8; WS6500-16 Versions earlier than 10.0.2.

Reporter	Title	Published	Views	Family All 7
CNVD	Information Disclosure Vulnerability in Multiple Huawei Products (CNVD-2020-36726)	22 May 202000:00	–	cnvd
CVE	CVE-2020-9069	21 May 202014:19	–	cve
EUVD	EUVD-2020-29898	7 Oct 202500:30	–	euvd
Huawei	Security Advisory - Information Leakage Vulnerability in Some Huawei Products	20 May 202000:00	–	huawei
NVD	CVE-2020-9069	21 May 202015:15	–	nvd
Prion	Information disclosure	21 May 202015:15	–	prion
RedhatCVE	CVE-2020-9069	22 May 202517:34	–	redhatcve

[
  {
    "product": "Anne-AL00",
    "vendor": "HUAWEI",
    "versions": [
      {
        "status": "affected",
        "version": "earlier than 9.1.0.331(C675E9R1P3T8)"
      }
    ]
  },
  {
    "product": "Berkeley-L09",
    "vendor": "HUAWEI",
    "versions": [
      {
        "status": "affected",
        "version": "earlier than 10.0.1.1(C675R1)"
      }
    ]
  },
  {
    "product": "CD16-10",
    "vendor": "HUAWEI",
    "versions": [
      {
        "status": "affected",
        "version": "earlier than 10.0.2.8"
      }
    ]
  },
  {
    "product": "CD17-10",
    "vendor": "HUAWEI",
    "versions": [
      {
        "status": "affected",
        "version": "earlier than 10.0.2.8"
      }
    ]
  },
  {
    "product": "CD17-16",
    "vendor": "HUAWEI",
    "versions": [
      {
        "status": "affected",
        "version": "earlier than 10.0.2.8"
      }
    ]
  },
  {
    "product": "CD18-10",
    "vendor": "HUAWEI",
    "versions": [
      {
        "status": "affected",
        "version": "earlier than 10.0.2.8"
      }
    ]
  },
  {
    "product": "CD18-16",
    "vendor": "HUAWEI",
    "versions": [
      {
        "status": "affected",
        "version": "earlier than 10.0.2.8"
      }
    ]
  },
  {
    "product": "Columbia-TL00B",
    "vendor": "HUAWEI",
    "versions": [
      {
        "status": "affected",
        "version": "earlier than 9.0.0.187(C01E181R1P20T8)"
      }
    ]
  },
  {
    "product": "E6878-370",
    "vendor": "HUAWEI",
    "versions": [
      {
        "status": "affected",
        "version": "earlier than 10.0.5.1(H610SP10C00)"
      }
    ]
  },
  {
    "product": "HUAWEI P30 lite",
    "vendor": "HUAWEI",
    "versions": [
      {
        "status": "affected",
        "version": "earlier than 10.0.0.185(C605E3R1P3)"
      },
      {
        "status": "affected",
        "version": "earlier than 10.0.0.197(C432E8R2P7)"
      }
    ]
  },
  {
    "product": "HUAWEI nova 4e",
    "vendor": "HUAWEI",
    "versions": [
      {
        "status": "affected",
        "version": "earlier than 10.0.0.158(C00E64R1P9)"
      }
    ]
  },
  {
    "product": "Honor 10 Lite",
    "vendor": "HUAWEI",
    "versions": [
      {
        "status": "affected",
        "version": "9.0.1.113(C675E11R1P12)"
      }
    ]
  },
  {
    "product": "LelandP-L22A",
    "vendor": "HUAWEI",
    "versions": [
      {
        "status": "affected",
        "version": "earlier than 9.1.0.166(C675E5R1P4T8)"
      }
    ]
  },
  {
    "product": "Marie-AL00AX",
    "vendor": "HUAWEI",
    "versions": [
      {
        "status": "affected",
        "version": "earlier than 10.0.0.158(C00E64R1P9)"
      }
    ]
  },
  {
    "product": "Marie-AL00AY",
    "vendor": "HUAWEI",
    "versions": [
      {
        "status": "affected",
        "version": "earlier than 10.0.0.158(C00E64R1P9)"
      }
    ]
  },
  {
    "product": "Marie-AL00BX",
    "vendor": "HUAWEI",
    "versions": [
      {
        "status": "affected",
        "version": "earlier than 10.0.0.158(C00E64R1P9)"
      }
    ]
  },
  {
    "product": "Marie-L03BX",
    "vendor": "HUAWEI",
    "versions": [
      {
        "status": "affected",
        "version": "earlier than 10.0.0.188(C605E5R1P1)"
      }
    ]
  },
  {
    "product": "Marie-L21BX",
    "vendor": "HUAWEI",
    "versions": [
      {
        "status": "affected",
        "version": "earlier than 10.0.0.188(C432E4R4P1)"
      },
      {
        "status": "affected",
        "version": "earlier than 10.0.0.188(C461E5R3P1)"
      }
    ]
  },
  {
    "product": "Marie-L22BX",
    "vendor": "HUAWEI",
    "versions": [
      {
        "status": "affected",
        "version": "earlier than 10.0.0.188(C636E3R3P1)"
      }
    ]
  },
  {
    "product": "Marie-L23BX",
    "vendor": "HUAWEI",
    "versions": [
      {
        "status": "affected",
        "version": "earlier than 10.0.0.188(C605E5R1P1)"
      }
    ]
  },
  {
    "product": "TC5200-16",
    "vendor": "HUAWEI",
    "versions": [
      {
        "status": "affected",
        "version": "earlier than 10.0.2.8"
      }
    ]
  },
  {
    "product": "WS5200-11",
    "vendor": "HUAWEI",
    "versions": [
      {
        "status": "affected",
        "version": "earlier than 10.0.2.8"
      }
    ]
  },
  {
    "product": "WS5200-12",
    "vendor": "HUAWEI",
    "versions": [
      {
        "status": "affected",
        "version": "earlier than 10.0.2.23"
      }
    ]
  },
  {
    "product": "WS5200-16",
    "vendor": "HUAWEI",
    "versions": [
      {
        "status": "affected",
        "version": "earlier than 10.0.2.8"
      }
    ]
  },
  {
    "product": "WS5200-17",
    "vendor": "HUAWEI",
    "versions": [
      {
        "status": "affected",
        "version": "earlier than 10.0.2.23"
      }
    ]
  },
  {
    "product": "WS5800-10",
    "vendor": "HUAWEI",
    "versions": [
      {
        "status": "affected",
        "version": "earlier than 10.0.3.27"
      }
    ]
  },
  {
    "product": "WS6500-10",
    "vendor": "HUAWEI",
    "versions": [
      {
        "status": "affected",
        "version": "earlier than 10.0.2.8"
      }
    ]
  },
  {
    "product": "WS6500-16",
    "vendor": "HUAWEI",
    "versions": [
      {
        "status": "affected",
        "version": "earlier than 10.0.2.8"
      }
    ]
  }
]

Source	Link
huawei	www.huawei.com/en/psirt/security-advisories/huawei-sa-20200520-01-leakage-en

29 May 2020 22:23Current

6.3Medium risk

Vulners AI Score6.3

EPSS0.00044