CVE-2020-9241 — HIGH (7.0) — White Hats Nepal

Vulnerability Description

Huawei 5G Mobile WiFi E6878-370 with versions of 10.0.3.1(H563SP1C00),10.0.3.1(H563SP21C233) have an improper authorization vulnerability. The device does not restrict certain data received from WAN port. Successful exploit could allow an attacker at WAN side to manage certain service of the device.

CVSS Score

7.0

HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality

LOW

Integrity

LOW

Availability

HIGH

Affected Products

Vendor	Product	Versions
Huawei	E6878-370 Firmware	10.0.3.1\(h563sp1c00\)
Huawei	E6878-370	-

References

https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200812-01-auth-eVendor Advisory
https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200812-01-auth-eVendor Advisory

FAQ

What is CVE-2020-9241?

CVE-2020-9241 is a vulnerability with a CVSS score of 7.0 (HIGH). Huawei 5G Mobile WiFi E6878-370 with versions of 10.0.3.1(H563SP1C00),10.0.3.1(H563SP21C233) have an improper authorization vulnerability. The device does not restrict certain data received from WAN p...

How severe is CVE-2020-9241?

CVE-2020-9241 has been rated HIGH with a CVSS base score of 7.0/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2020-9241?

Check the references section above for vendor advisories and patch information. Affected products include: Huawei E6878-370 Firmware, Huawei E6878-370.