1. Home
  2. CVE Database
  3. CVE-2020-9069
MEDIUM · 6.5

CVE-2020-9069

There is an information leakage vulnerability in some Huawei products. An unauthenticated, adjacent attacker could exploit this vulnerability to decrypt data. Successful exploitation may leak informat...

Vulnerability Description

There is an information leakage vulnerability in some Huawei products. An unauthenticated, adjacent attacker could exploit this vulnerability to decrypt data. Successful exploitation may leak information randomly. Affected product versions include: Anne-AL00 Versions earlier than 9.1.0.331(C675E9R1P3T8); Berkeley-L09 Versions earlier than 10.0.1.1(C675R1); CD16-10 Versions earlier than 10.0.2.8; CD17-10 Versions earlier than 10.0.2.8; CD17-16 Versions earlier than 10.0.2.8; CD18-10 Versions earlier than 10.0.2.8; CD18-16 Versions earlier than 10.0.2.8; Columbia-TL00B Versions earlier than 9.0.0.187(C01E181R1P20T8); E6878-370 Versions earlier than 10.0.5.1(H610SP10C00); HUAWEI P30 lite Versions earlier than 10.0.0.185(C605E3R1P3), Versions earlier than 10.0.0.197(C432E8R2P7); HUAWEI nova 4e Versions earlier than 10.0.0.158(C00E64R1P9); Honor 10 Lite 9.0.1.113(C675E11R1P12); LelandP-L22A Versions earlier than 9.1.0.166(C675E5R1P4T8); Marie-AL00AX Versions earlier than 10.0.0.158(C00E64R1P9); Marie-AL00AY Versions earlier than 10.0.0.158(C00E64R1P9); Marie-AL00BX Versions earlier than 10.0.0.158(C00E64R1P9); Marie-L03BX Versions earlier than 10.0.0.188(C605E5R1P1); Marie-L21BX Versions earlier than 10.0.0.188(C432E4R4P1), Versions earlier than 10.0.0.188(C461E5R3P1); Marie-L22BX Versions earlier than 10.0.0.188(C636E3R3P1); Marie-L23BX Versions earlier than 10.0.0.188(C605E5R1P1); TC5200-16 Versions earlier than 10.0.2.8; WS5200-11 Versions earlier than 10.0.2.8; WS5200-12 Versions earlier than 10.0.2.23; WS5200-16 Versions earlier than 10.0.2.8; WS5200-17 Versions earlier than 10.0.2.23; WS5800-10 Versions earlier than 10.0.3.27; WS6500-10 Versions earlier than 10.0.2.8; WS6500-16 Versions earlier than 10.0.2.8

CVSS Score

6.5

MEDIUM

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Attack Vector
ADJACENT_NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
NONE
Availability
NONE

Affected Products

VendorProductVersions
HuaweiAnne-Al00 Firmware< 9.1.0.331\(c675e9r1p3t8\)
HuaweiAnne-Al00-
HuaweiBerkeley-L09 Firmware< 10.0.1.1\(c675r1\)
HuaweiBerkeley-L09-
HuaweiCd16-10 Firmware< 10.0.2.8
HuaweiCd16-10-
HuaweiCd17-10 Firmware< 10.0.2.8
HuaweiCd17-10-
HuaweiCd17-16 Firmware< 10.0.2.8
HuaweiCd17-16-
HuaweiCd18-10 Firmware< 10.0.2.8
HuaweiCd18-10-
HuaweiCd18-16 Firmware< 10.0.2.8
HuaweiCd18-16-
HuaweiColumbia-Tl00B Firmware< 9.0.0.187\(c01e181r1p20t8\)
HuaweiColumbia-Tl00B-
HuaweiE6878-370 Firmware< 10.0.5.1\(h610sp10c00\)
HuaweiE6878-370-
HuaweiHonor 10 Lite Firmware< 10.0.0.182\(c675e17r2p2\)
HuaweiHonor 10 Lite-

References

FAQ

What is CVE-2020-9069?

CVE-2020-9069 is a vulnerability with a CVSS score of 6.5 (MEDIUM). There is an information leakage vulnerability in some Huawei products. An unauthenticated, adjacent attacker could exploit this vulnerability to decrypt data. Successful exploitation may leak informat...

How severe is CVE-2020-9069?

CVE-2020-9069 has been rated MEDIUM with a CVSS base score of 6.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2020-9069?

Check the references section above for vendor advisories and patch information. Affected products include: Huawei Anne-Al00 Firmware, Huawei Anne-Al00, Huawei Berkeley-L09 Firmware, Huawei Berkeley-L09, Huawei Cd16-10 Firmware.