CVE-2020-9071
There is a few bytes out-of-bounds read vulnerability in some Huawei products. The software reads data past the end of the intended buffer when parsing certain message, an authenticated attacker could exploit this vulnerability by sending crafted messages to the device. Successful exploit may cause service abnormal in specific scenario.Affected product versions include:AR120-S versions V200R007C00SPC900,V200R007C00SPCa00
Published:Jun 1, 2020
Last Modified:Nov 21, 2024
EPS:Jun 1, 2020
EPSS Score:0.00166
CVSS Score:6.5
Affected Products
Vendor
Product
Action
Vendor
Huawei
Product
Ar120-s
Huawei
Ar120-s
Vendor
Huawei
Product
Ar120-s Firmware
Huawei
Ar120-s Firmware
Vendor
Huawei
Product
Ar1200
Huawei
Ar1200
Vendor
Huawei
Product
Ar1200-s
Huawei
Ar1200-s
Vendor
Huawei
Product
Ar1200-s Firmware
Huawei
Ar1200-s Firmware
Vendor
Huawei
Product
Ar1200 Firmware
Huawei
Ar1200 Firmware
Vendor
Huawei
Product
Ar150
Huawei
Ar150
Vendor
Huawei
Product
Ar150-s
Huawei
Ar150-s
Vendor
Huawei
Product
Ar150-s Firmware
Huawei
Ar150-s Firmware
Vendor
Huawei
Product
Ar150 Firmware
Huawei
Ar150 Firmware
Vendor
Huawei
Product
Ar160
Huawei
Ar160
Vendor
Huawei
Product
Ar160 Firmware
Huawei
Ar160 Firmware
Vendor
Huawei
Product
Ar200
Huawei
Ar200
Vendor
Huawei
Product
Ar200-s
Huawei
Ar200-s
Vendor
Huawei
Product
Ar200-s Firmware
Huawei
Ar200-s Firmware
Vendor
Huawei
Product
Ar200 Firmware
Huawei
Ar200 Firmware
Vendor
Huawei
Product
Ar2200
Huawei
Ar2200
Vendor
Huawei
Product
Ar2200-s
Huawei
Ar2200-s
Vendor
Huawei
Product
Ar2200-s Firmware
Huawei
Ar2200-s Firmware
Vendor
Huawei
Product
Ar2200 Firmware
Huawei
Ar2200 Firmware
Vendor
Huawei
Product
Ar3200
Huawei
Ar3200
Vendor
Huawei
Product
Ar3200 Firmware
Huawei
Ar3200 Firmware
Vendor
Huawei
Product
Ar3600
Huawei
Ar3600
Vendor
Huawei
Product
Ar3600 Firmware
Huawei
Ar3600 Firmware
Vendor
Huawei
Product
Ar510
Huawei
Ar510
Vendor
Huawei
Product
Ar510 Firmware
Huawei
Ar510 Firmware
Vendor
Huawei
Product
Netengine16ex
Huawei
Netengine16ex
Vendor
Huawei
Product
Netengine16ex Firmware
Huawei
Netengine16ex Firmware
Vendor
Huawei
Product
Srg1300
Huawei
Srg1300
Vendor
Huawei
Product
Srg1300 Firmware
Huawei
Srg1300 Firmware
Vendor
Huawei
Product
Srg2300
Huawei
Srg2300
Vendor
Huawei
Product
Srg2300 Firmware
Huawei
Srg2300 Firmware
Vendor
Huawei
Product
Srg3300
Huawei
Srg3300
Vendor
Huawei
Product
Srg3300 Firmware
Huawei
Srg3300 Firmware
Exploits
No exploit reference
Common Weakness Enumeration
Common Attack Pattern Enumeration and Classification (CAPEC)
Related CVEs
Common Vulnerability Scoring System
Attack Vector
Network
Adjacent
Local
Physical
Privileges Required
None
Low
High
User Interaction
None
Required
Scope
Unchanged
Changed
Confidentiality
None
Low
High
Integrity
None
Low
High
Availability
None
Low
High
