CVE-2020-9102

Low

Description

There is a information leak vulnerability in some Huawei products, and it could allow a local attacker to get information. The vulnerability is due to the improper management of the username. An attacker with the ability to access the device and cause the username information leak. Affected product versions include: CloudEngine 12800 versions V200R002C50SPC800, V200R003C00SPC810, V200R005C00SPC800, V200R005C10SPC800, V200R019C00SPC800; CloudEngine 5800 versions V200R002C50SPC800, V200R003C00SPC810, V200R005C00SPC800, V200R005C10SPC800, V200R019C00SPC800; CloudEngine 6800 versions V200R002C50SPC800, V200R003C00SPC810, V200R005C00SPC800, V200R005C10SPC800, V200R005C20SPC800, V200R019C00SPC800; CloudEngine 7800 versions V200R002C50SPC800, V200R003C00SPC810, V200R005C00SPC800, V200R005C10SPC800, V200R019C00SPC800

SeverityLow

CVSS3.3

Exploit probability—

ProductHuawei Cloudengine 12800 Firmware

PublishedJul 17, 2020

First seenJul 17, 2020

How to fix

Sources list no fixed version or patch link for this vulnerability.

Affected products

Product	Affected versions	Fixed in
huawei cloudengine_12800_firmware	v200r002c50spc800, v200r003c00spc810, v200r005c00spc800, v200r005c10spc800, v200r019c00spc800	—
huawei cloudengine_5800_firmware	v200r002c50spc800, v200r003c00spc810, v200r005c00spc800, v200r005c10spc800, v200r019c00spc800	—
huawei cloudengine_6800_firmware	v200r002c50spc800, v200r003c00spc810, v200r005c00spc800, v200r005c10spc800, v200r005c20spc800, v200r019c00spc800	—
huawei cloudengine_7800_firmware	v200r002c50spc800, v200r003c00spc810, v200r005c00spc800, v200r005c10spc800, v200r019c00spc800	—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.