Threat Investigation
Request a demo

CVE-2020-9069

Medium

Description

There is an information leakage vulnerability in some Huawei products. An unauthenticated, adjacent attacker could exploit this vulnerability to decrypt data. Successful exploitation may leak information randomly. Affected product versions include: Anne-AL00 Versions earlier than 9.1.0.331(C675E9R1P3T8); Berkeley-L09 Versions earlier than 10.0.1.1(C675R1); CD16-10 Versions earlier than 10.0.2.8; CD17-10 Versions earlier than 10.0.2.8; CD17-16 Versions earlier than 10.0.2.8; CD18-10 Versions earlier than 10.0.2.8; CD18-16 Versions earlier than 10.0.2.8; Columbia-TL00B Versions earlier than 9.0.0.187(C01E181R1P20T8); E6878-370 Versions earlier than 10.0.5.1(H610SP10C00); HUAWEI P30 lite Versions earlier than 10.0.0.185(C605E3R1P3), Versions earlier than 10.0.0.197(C432E8R2P7); HUAWEI nova 4e Versions earlier than 10.0.0.158(C00E64R1P9); Honor 10 Lite 9.0.1.113(C675E11R1P12); LelandP-L22A Versions earlier than 9.1.0.166(C675E5R1P4T8); Marie-AL00AX Versions earlier than 10.0.0.158(C00E64R1P9); Marie-AL00AY Versions earlier than 10.0.0.158(C00E64R1P9); Marie-AL00BX Versions earlier than 10.0.0.158(C00E64R1P9); Marie-L03BX Versions earlier than 10.0.0.188(C605E5R1P1); Marie-L21BX Versions earlier than 10.0.0.188(C432E4R4P1), Versions earlier than 10.0.0.188(C461E5R3P1); Marie-L22BX Versions earlier than 10.0.0.188(C636E3R3P1); Marie-L23BX Versions earlier than 10.0.0.188(C605E5R1P1); TC5200-16 Versions earlier than 10.0.2.8; WS5200-11 Versions earlier than 10.0.2.8; WS5200-12 Versions earlier than 10.0.2.23; WS5200-16 Versions earlier than 10.0.2.8; WS5200-17 Versions earlier than 10.0.2.23; WS5800-10 Versions earlier than 10.0.3.27; WS6500-10 Versions earlier than 10.0.2.8; WS6500-16 Versions earlier than 10.0.2.8

SeverityMedium
CVSS6.5
Exploit probability—
ProductHuawei Anne-al00 Firmware
PublishedMay 21, 2020
First seenMay 21, 2020

How to fix

Update
  • huawei anne-al00_firmware9.1.0.331\(c675e9r1p3t8\) or later
  • huawei berkeley-l09_firmware10.0.1.1\(c675r1\) or later
  • huawei cd16-10_firmware10.0.2.8 or later
  • huawei cd17-10_firmware10.0.2.8 or later
  • huawei cd17-16_firmware10.0.2.8 or later
  • huawei cd18-10_firmware10.0.2.8 or later
  • huawei cd18-16_firmware10.0.2.8 or later
  • huawei columbia-tl00b_firmware9.0.0.187\(c01e181r1p20t8\) or later
  • huawei e6878-370_firmware10.0.5.1\(h610sp10c00\) or later
  • huawei honor_10_lite_firmware10.0.0.182\(c675e17r2p2\) or later
  • huawei lelandp-l22a_firmware9.1.0.166\(c675e5r1p4t8\) or later
  • huawei tc5200-16_firmware10.0.2.8 or later

Affected products

ProductAffected versionsFixed in
huawei anne-al00_firmwarev < 9.1.0.331\(c675e9r1p3t8\)9.1.0.331\(c675e9r1p3t8\)
huawei berkeley-l09_firmwarev < 10.0.1.1\(c675r1\)10.0.1.1\(c675r1\)
huawei cd16-10_firmwarev < 10.0.2.810.0.2.8
huawei cd17-10_firmwarev < 10.0.2.810.0.2.8
huawei cd17-16_firmwarev < 10.0.2.810.0.2.8
huawei cd18-10_firmwarev < 10.0.2.810.0.2.8
huawei cd18-16_firmwarev < 10.0.2.810.0.2.8
huawei columbia-tl00b_firmwarev < 9.0.0.187\(c01e181r1p20t8\)9.0.0.187\(c01e181r1p20t8\)
huawei e6878-370_firmwarev < 10.0.5.1\(h610sp10c00\)10.0.5.1\(h610sp10c00\)
huawei honor_10_lite_firmwarev < 10.0.0.182\(c675e17r2p2\)10.0.0.182\(c675e17r2p2\)
huawei lelandp-l22a_firmwarev < 9.1.0.166\(c675e5r1p4t8\)9.1.0.166\(c675e5r1p4t8\)
huawei tc5200-16_firmwarev < 10.0.2.810.0.2.8
huawei ws5200-11_firmwarev < 10.0.2.8, v < 10.0.2.2310.0.2.8, 10.0.2.23
huawei ws5200-16_firmwarev < 10.0.2.810.0.2.8
huawei ws5200-17_firmwarev < 10.0.2.2310.0.2.23
huawei ws5800-10_firmwarev < 10.0.3.2710.0.3.27
huawei ws6500-10_firmwarev < 10.0.2.810.0.2.8
huawei ws6500-16_firmwarev < 10.0.2.810.0.2.8

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.