Search criteria

5 vulnerabilities found for WS6500-10 by HUAWEI

VAR-201911-0270

Vulnerability from variot - Updated: 2024-11-23 22:11

Some Huawei home routers have an input validation vulnerability. Due to input parameter is not correctly verified, an attacker can exploit this vulnerability by sending special constructed packets to obtain files in the device and upload files to some directories. The Huawei HiRouter-CD15-10 is a wireless router from China's Huawei

Show details on source website

{
  "@context": {
    "@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
    "affected_products": {
      "@id": "https://www.variotdbs.pl/ref/affected_products"
    },
    "configurations": {
      "@id": "https://www.variotdbs.pl/ref/configurations"
    },
    "credits": {
      "@id": "https://www.variotdbs.pl/ref/credits"
    },
    "cvss": {
      "@id": "https://www.variotdbs.pl/ref/cvss/"
    },
    "description": {
      "@id": "https://www.variotdbs.pl/ref/description/"
    },
    "exploit_availability": {
      "@id": "https://www.variotdbs.pl/ref/exploit_availability/"
    },
    "external_ids": {
      "@id": "https://www.variotdbs.pl/ref/external_ids/"
    },
    "iot": {
      "@id": "https://www.variotdbs.pl/ref/iot/"
    },
    "iot_taxonomy": {
      "@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
    },
    "patch": {
      "@id": "https://www.variotdbs.pl/ref/patch/"
    },
    "problemtype_data": {
      "@id": "https://www.variotdbs.pl/ref/problemtype_data/"
    },
    "references": {
      "@id": "https://www.variotdbs.pl/ref/references/"
    },
    "sources": {
      "@id": "https://www.variotdbs.pl/ref/sources/"
    },
    "sources_release_date": {
      "@id": "https://www.variotdbs.pl/ref/sources_release_date/"
    },
    "sources_update_date": {
      "@id": "https://www.variotdbs.pl/ref/sources_update_date/"
    },
    "threat_type": {
      "@id": "https://www.variotdbs.pl/ref/threat_type/"
    },
    "title": {
      "@id": "https://www.variotdbs.pl/ref/title/"
    },
    "type": {
      "@id": "https://www.variotdbs.pl/ref/type/"
    }
  },
  "@id": "https://www.variotdbs.pl/vuln/VAR-201911-0270",
  "affected_products": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/affected_products#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        },
        "@id": "https://www.variotdbs.pl/ref/sources"
      }
    },
    "data": [
      {
        "model": "ws5200-11",
        "scope": "eq",
        "trust": 1.6,
        "vendor": "huawei",
        "version": "10.0.2.3"
      },
      {
        "model": "ws5200-11",
        "scope": "eq",
        "trust": 1.6,
        "vendor": "huawei",
        "version": "9.0.3.11"
      },
      {
        "model": "tc5200-10",
        "scope": "eq",
        "trust": 1.2,
        "vendor": "huawei",
        "version": "10.0.2.3"
      },
      {
        "model": "ws5100-10",
        "scope": "eq",
        "trust": 1.2,
        "vendor": "huawei",
        "version": "9.0.3.11"
      },
      {
        "model": "ws5102-10",
        "scope": "eq",
        "trust": 1.2,
        "vendor": "huawei",
        "version": "10.0.2.2"
      },
      {
        "model": "ws5106-10",
        "scope": "eq",
        "trust": 1.2,
        "vendor": "huawei",
        "version": "10.0.2.2"
      },
      {
        "model": "ws5108-10",
        "scope": "eq",
        "trust": 1.2,
        "vendor": "huawei",
        "version": "10.0.2.2"
      },
      {
        "model": "ws5280-10",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "huawei",
        "version": "10.0.2.6"
      },
      {
        "model": "cd10-10",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "huawei",
        "version": "10.0.2.7"
      },
      {
        "model": "hirouter-cd15-10",
        "scope": "gte",
        "trust": 1.0,
        "vendor": "huawei",
        "version": "9.0.2.3"
      },
      {
        "model": "hirouter-cd21-16",
        "scope": "gte",
        "trust": 1.0,
        "vendor": "huawei",
        "version": "9.0.3.9"
      },
      {
        "model": "hirouter-cd30-10",
        "scope": "gte",
        "trust": 1.0,
        "vendor": "huawei",
        "version": "10.0.2.8"
      },
      {
        "model": "ws5280-11",
        "scope": "gte",
        "trust": 1.0,
        "vendor": "huawei",
        "version": "9.0.3.22"
      },
      {
        "model": "ws6500-11",
        "scope": "gte",
        "trust": 1.0,
        "vendor": "huawei",
        "version": "10.0.2.2"
      },
      {
        "model": "hirouter-cd20-10",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "huawei",
        "version": "10.0.2.6"
      },
      {
        "model": "cd10-10",
        "scope": "gte",
        "trust": 1.0,
        "vendor": "huawei",
        "version": "10.0.2.2"
      },
      {
        "model": "hirouter-cd30-11",
        "scope": "gte",
        "trust": 1.0,
        "vendor": "huawei",
        "version": "10.0.2.8"
      },
      {
        "model": "ws826-10",
        "scope": "gte",
        "trust": 1.0,
        "vendor": "huawei",
        "version": "9.0.3.11"
      },
      {
        "model": "ws5100-10",
        "scope": "gte",
        "trust": 1.0,
        "vendor": "huawei",
        "version": "9.0.3.11"
      },
      {
        "model": "cd17-10",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "huawei",
        "version": "10.0.2.5"
      },
      {
        "model": "hirouter-cd30-10",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "huawei",
        "version": "10.0.2.9"
      },
      {
        "model": "hirouter-h1-10",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "huawei",
        "version": "10.0.2.5"
      },
      {
        "model": "ws5108-10",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "huawei",
        "version": "10.0.2.7"
      },
      {
        "model": "hirouter-cd30-11",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "huawei",
        "version": "10.0.2.9"
      },
      {
        "model": "hirouter-cd20-10",
        "scope": "gte",
        "trust": 1.0,
        "vendor": "huawei",
        "version": "9.0.3.9"
      },
      {
        "model": "ws5106-10",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "huawei",
        "version": "10.0.2.7"
      },
      {
        "model": "ws5280-10",
        "scope": "gte",
        "trust": 1.0,
        "vendor": "huawei",
        "version": "9.0.3.22"
      },
      {
        "model": "ws5200-10",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "huawei",
        "version": "10.0.2.6"
      },
      {
        "model": "ws5102-10",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "huawei",
        "version": "10.0.2.7"
      },
      {
        "model": "hirouter-cd21-16",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "huawei",
        "version": "10.0.2.5"
      },
      {
        "model": "ws5108-10",
        "scope": "gte",
        "trust": 1.0,
        "vendor": "huawei",
        "version": "10.0.2.2"
      },
      {
        "model": "hirouter-h1-10",
        "scope": "gte",
        "trust": 1.0,
        "vendor": "huawei",
        "version": "9.0.3.11"
      },
      {
        "model": "ws6500-10",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "huawei",
        "version": "10.0.2.5"
      },
      {
        "model": "hirouter-cd15-10",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "huawei",
        "version": "10.0.2.5"
      },
      {
        "model": "cd16-10",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "huawei",
        "version": "10.0.2.5"
      },
      {
        "model": "ws5106-10",
        "scope": "gte",
        "trust": 1.0,
        "vendor": "huawei",
        "version": "10.0.2.2"
      },
      {
        "model": "ws5102-10",
        "scope": "gte",
        "trust": 1.0,
        "vendor": "huawei",
        "version": "10.0.2.2"
      },
      {
        "model": "tc5200-10",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "huawei",
        "version": "10.0.2.5"
      },
      {
        "model": "cd18-10",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "huawei",
        "version": "10.0.2.5"
      },
      {
        "model": "ws5280-11",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "huawei",
        "version": "10.0.2.6"
      },
      {
        "model": "ws6500-10",
        "scope": "gte",
        "trust": 1.0,
        "vendor": "huawei",
        "version": "10.0.2.3"
      },
      {
        "model": "ws5200-10",
        "scope": "gte",
        "trust": 1.0,
        "vendor": "huawei",
        "version": "9.0.3.9"
      },
      {
        "model": "ws5100-10",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "huawei",
        "version": "10.0.2.7"
      },
      {
        "model": "ws826-10",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "huawei",
        "version": "10.0.2.5"
      },
      {
        "model": "tc5200-10",
        "scope": "gte",
        "trust": 1.0,
        "vendor": "huawei",
        "version": "10.0.2.3"
      },
      {
        "model": "cd16-10",
        "scope": "gte",
        "trust": 1.0,
        "vendor": "huawei",
        "version": "10.0.2.3"
      },
      {
        "model": "cd17-10",
        "scope": "gte",
        "trust": 1.0,
        "vendor": "huawei",
        "version": "9.0.3.3"
      },
      {
        "model": "ws6500-11",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "huawei",
        "version": "10.0.2.7"
      },
      {
        "model": "cd18-10",
        "scope": "gte",
        "trust": 1.0,
        "vendor": "huawei",
        "version": "9.0.2.23"
      },
      {
        "model": "cd10-10",
        "scope": null,
        "trust": 0.8,
        "vendor": "huawei",
        "version": null
      },
      {
        "model": "cd16-10",
        "scope": null,
        "trust": 0.8,
        "vendor": "huawei",
        "version": null
      },
      {
        "model": "cd17-10",
        "scope": null,
        "trust": 0.8,
        "vendor": "huawei",
        "version": null
      },
      {
        "model": "cd18-10",
        "scope": null,
        "trust": 0.8,
        "vendor": "huawei",
        "version": null
      },
      {
        "model": "hirouter-cd15-10",
        "scope": null,
        "trust": 0.8,
        "vendor": "huawei",
        "version": null
      },
      {
        "model": "hirouter-cd20-10",
        "scope": null,
        "trust": 0.8,
        "vendor": "huawei",
        "version": null
      },
      {
        "model": "hirouter-cd21-16",
        "scope": null,
        "trust": 0.8,
        "vendor": "huawei",
        "version": null
      },
      {
        "model": "hirouter-cd30-10",
        "scope": null,
        "trust": 0.8,
        "vendor": "huawei",
        "version": null
      },
      {
        "model": "hirouter-cd30-11",
        "scope": null,
        "trust": 0.8,
        "vendor": "huawei",
        "version": null
      },
      {
        "model": "hirouter-h1-10",
        "scope": null,
        "trust": 0.8,
        "vendor": "huawei",
        "version": null
      },
      {
        "model": "cd10-10",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "huawei",
        "version": "10.0.2.2"
      },
      {
        "model": "cd16-10",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "huawei",
        "version": "10.0.2.3"
      },
      {
        "model": "cd17-10",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "huawei",
        "version": "9.0.3.3"
      },
      {
        "model": "cd18-10",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "huawei",
        "version": "9.0.2.23"
      },
      {
        "model": "hirouter-cd15-10",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "huawei",
        "version": "9.0.2.3"
      },
      {
        "model": "hirouter-cd20-10",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "huawei",
        "version": "9.0.3.9"
      },
      {
        "model": "hirouter-cd21-16",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "huawei",
        "version": "9.0.3.9"
      },
      {
        "model": "hirouter-cd30-10",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "huawei",
        "version": "10.0.2.8"
      },
      {
        "model": "hirouter-cd30-11",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "huawei",
        "version": "10.0.2.8"
      },
      {
        "model": "hirouter-h1-10",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "huawei",
        "version": "9.0.3.11"
      },
      {
        "model": "ws5200-10",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "huawei",
        "version": "9.0.3.9"
      },
      {
        "model": "ws5280-10",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "huawei",
        "version": "9.0.3.22"
      },
      {
        "model": "ws5280-11",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "huawei",
        "version": "9.0.3.22"
      },
      {
        "model": "ws6500-10",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "huawei",
        "version": "10.0.2.3"
      },
      {
        "model": "ws6500-11",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "huawei",
        "version": "10.0.2.2"
      },
      {
        "model": "ws826-10",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "huawei",
        "version": "9.0.3.11"
      },
      {
        "model": "ws5106-10",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "huawei",
        "version": null
      },
      {
        "model": "hirouter-h1-10",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "huawei",
        "version": null
      },
      {
        "model": "tc5200-10",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "huawei",
        "version": null
      },
      {
        "model": "ws5102-10",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "huawei",
        "version": null
      },
      {
        "model": "ws5100-10",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "huawei",
        "version": null
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2019-42427"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2019-012694"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201911-775"
      },
      {
        "db": "NVD",
        "id": "CVE-2019-5268"
      }
    ]
  },
  "configurations": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/configurations#",
      "children": {
        "@container": "@list"
      },
      "cpe_match": {
        "@container": "@list"
      },
      "data": {
        "@container": "@list"
      },
      "nodes": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "CVE_data_version": "4.0",
        "nodes": [
          {
            "cpe_match": [
              {
                "cpe22Uri": "cpe:/o:huawei:cd10-10_firmware",
                "vulnerable": true
              },
              {
                "cpe22Uri": "cpe:/o:huawei:cd16-10_firmware",
                "vulnerable": true
              },
              {
                "cpe22Uri": "cpe:/o:huawei:cd17-10_firmware",
                "vulnerable": true
              },
              {
                "cpe22Uri": "cpe:/o:huawei:cd18-10_firmware",
                "vulnerable": true
              },
              {
                "cpe22Uri": "cpe:/o:huawei:hirouter-cd15-10_firmware",
                "vulnerable": true
              },
              {
                "cpe22Uri": "cpe:/o:huawei:hirouter-cd20-10_firmware",
                "vulnerable": true
              },
              {
                "cpe22Uri": "cpe:/o:huawei:hirouter-cd21-16_firmware",
                "vulnerable": true
              },
              {
                "cpe22Uri": "cpe:/o:huawei:hirouter-cd30-10_firmware",
                "vulnerable": true
              },
              {
                "cpe22Uri": "cpe:/o:huawei:hirouter-cd30-11_firmware",
                "vulnerable": true
              },
              {
                "cpe22Uri": "cpe:/o:huawei:hirouter-h1-10_firmware",
                "vulnerable": true
              }
            ],
            "operator": "OR"
          }
        ]
      }
    ],
    "sources": [
      {
        "db": "JVNDB",
        "id": "JVNDB-2019-012694"
      }
    ]
  },
  "credits": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/credits#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "Changting Technology Security Lab of Beijing Changting Technology Co., Ltd.",
    "sources": [
      {
        "db": "CNNVD",
        "id": "CNNVD-201911-775"
      }
    ],
    "trust": 0.6
  },
  "cve": "CVE-2019-5268",
  "cvss": {
    "@context": {
      "cvssV2": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
      },
      "cvssV3": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
      },
      "severity": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/cvss/severity#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/severity"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        },
        "@id": "https://www.variotdbs.pl/ref/sources"
      }
    },
    "data": [
      {
        "cvssV2": [
          {
            "accessComplexity": "LOW",
            "accessVector": "ADJACENT_NETWORK",
            "authentication": "NONE",
            "author": "nvd@nist.gov",
            "availabilityImpact": "NONE",
            "baseScore": 4.8,
            "confidentialityImpact": "PARTIAL",
            "exploitabilityScore": 6.5,
            "id": "CVE-2019-5268",
            "impactScore": 4.9,
            "integrityImpact": "PARTIAL",
            "severity": "MEDIUM",
            "trust": 1.8,
            "vectorString": "AV:A/AC:L/Au:N/C:P/I:P/A:N",
            "version": "2.0"
          },
          {
            "accessComplexity": "LOW",
            "accessVector": "ADJACENT_NETWORK",
            "authentication": "NONE",
            "author": "CNVD",
            "availabilityImpact": "PARTIAL",
            "baseScore": 5.8,
            "confidentialityImpact": "PARTIAL",
            "exploitabilityScore": 6.5,
            "id": "CNVD-2019-42427",
            "impactScore": 6.4,
            "integrityImpact": "PARTIAL",
            "severity": "MEDIUM",
            "trust": 0.6,
            "vectorString": "AV:A/AC:L/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          }
        ],
        "cvssV3": [
          {
            "attackComplexity": "LOW",
            "attackVector": "ADJACENT",
            "author": "nvd@nist.gov",
            "availabilityImpact": "NONE",
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "exploitabilityScore": 2.8,
            "id": "CVE-2019-5268",
            "impactScore": 5.2,
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "trust": 1.0,
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          {
            "attackComplexity": "Low",
            "attackVector": "Adjacent Network",
            "author": "NVD",
            "availabilityImpact": "None",
            "baseScore": 8.1,
            "baseSeverity": "High",
            "confidentialityImpact": "High",
            "exploitabilityScore": null,
            "id": "CVE-2019-5268",
            "impactScore": null,
            "integrityImpact": "High",
            "privilegesRequired": "None",
            "scope": "Unchanged",
            "trust": 0.8,
            "userInteraction": "None",
            "vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.0"
          }
        ],
        "severity": [
          {
            "author": "nvd@nist.gov",
            "id": "CVE-2019-5268",
            "trust": 1.0,
            "value": "HIGH"
          },
          {
            "author": "NVD",
            "id": "CVE-2019-5268",
            "trust": 0.8,
            "value": "High"
          },
          {
            "author": "CNVD",
            "id": "CNVD-2019-42427",
            "trust": 0.6,
            "value": "MEDIUM"
          },
          {
            "author": "CNNVD",
            "id": "CNNVD-201911-775",
            "trust": 0.6,
            "value": "HIGH"
          }
        ]
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2019-42427"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2019-012694"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201911-775"
      },
      {
        "db": "NVD",
        "id": "CVE-2019-5268"
      }
    ]
  },
  "description": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/description#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "Some Huawei home routers have an input validation vulnerability. Due to input parameter is not correctly verified, an attacker can exploit this vulnerability by sending special constructed packets to obtain files in the device and upload files to some directories. The Huawei HiRouter-CD15-10 is a wireless router from China\u0027s Huawei",
    "sources": [
      {
        "db": "NVD",
        "id": "CVE-2019-5268"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2019-012694"
      },
      {
        "db": "CNVD",
        "id": "CNVD-2019-42427"
      }
    ],
    "trust": 2.16
  },
  "external_ids": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/external_ids#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "db": "NVD",
        "id": "CVE-2019-5268",
        "trust": 3.0
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2019-012694",
        "trust": 0.8
      },
      {
        "db": "CNVD",
        "id": "CNVD-2019-42427",
        "trust": 0.6
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201911-775",
        "trust": 0.6
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2019-42427"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2019-012694"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201911-775"
      },
      {
        "db": "NVD",
        "id": "CVE-2019-5268"
      }
    ]
  },
  "id": "VAR-201911-0270",
  "iot": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/iot#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": true,
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2019-42427"
      }
    ],
    "trust": 1.2980519618181818
  },
  "iot_taxonomy": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "category": [
          "Network device"
        ],
        "sub_category": null,
        "trust": 0.6
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2019-42427"
      }
    ]
  },
  "last_update_date": "2024-11-23T22:11:46.825000Z",
  "patch": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/patch#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "title": "huawei-sa-20191113-01-homerouter",
        "trust": 0.8,
        "url": "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20191113-01-homerouter-en"
      },
      {
        "title": "Patch for Multiple Huawei Product Input Validation Error Vulnerabilities",
        "trust": 0.6,
        "url": "https://www.cnvd.org.cn/patchInfo/show/192103"
      },
      {
        "title": "Multiple Huawei Product input verification error vulnerability fixes",
        "trust": 0.6,
        "url": "http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=104477"
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2019-42427"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2019-012694"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201911-775"
      }
    ]
  },
  "problemtype_data": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "problemtype": "CWE-20",
        "trust": 1.8
      }
    ],
    "sources": [
      {
        "db": "JVNDB",
        "id": "JVNDB-2019-012694"
      },
      {
        "db": "NVD",
        "id": "CVE-2019-5268"
      }
    ]
  },
  "references": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/references#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "trust": 1.6,
        "url": "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20191113-01-homerouter-en"
      },
      {
        "trust": 1.4,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2019-5268"
      },
      {
        "trust": 1.2,
        "url": "https://www.huawei.com/cn/psirt/security-advisories/huawei-sa-20191113-01-homerouter-cn"
      },
      {
        "trust": 0.8,
        "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-5268"
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2019-42427"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2019-012694"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201911-775"
      },
      {
        "db": "NVD",
        "id": "CVE-2019-5268"
      }
    ]
  },
  "sources": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "db": "CNVD",
        "id": "CNVD-2019-42427"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2019-012694"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201911-775"
      },
      {
        "db": "NVD",
        "id": "CVE-2019-5268"
      }
    ]
  },
  "sources_release_date": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "date": "2019-11-27T00:00:00",
        "db": "CNVD",
        "id": "CNVD-2019-42427"
      },
      {
        "date": "2019-12-11T00:00:00",
        "db": "JVNDB",
        "id": "JVNDB-2019-012694"
      },
      {
        "date": "2019-11-13T00:00:00",
        "db": "CNNVD",
        "id": "CNNVD-201911-775"
      },
      {
        "date": "2019-11-29T21:15:11.387000",
        "db": "NVD",
        "id": "CVE-2019-5268"
      }
    ]
  },
  "sources_update_date": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "date": "2019-11-27T00:00:00",
        "db": "CNVD",
        "id": "CNVD-2019-42427"
      },
      {
        "date": "2019-12-11T00:00:00",
        "db": "JVNDB",
        "id": "JVNDB-2019-012694"
      },
      {
        "date": "2020-01-09T00:00:00",
        "db": "CNNVD",
        "id": "CNNVD-201911-775"
      },
      {
        "date": "2024-11-21T04:44:38.527000",
        "db": "NVD",
        "id": "CVE-2019-5268"
      }
    ]
  },
  "threat_type": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/threat_type#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "remote or local",
    "sources": [
      {
        "db": "CNNVD",
        "id": "CNNVD-201911-775"
      }
    ],
    "trust": 0.6
  },
  "title": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/title#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "plural  Huawei Vulnerability in input validation in home router products",
    "sources": [
      {
        "db": "JVNDB",
        "id": "JVNDB-2019-012694"
      }
    ],
    "trust": 0.8
  },
  "type": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/type#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "input validation error",
    "sources": [
      {
        "db": "CNNVD",
        "id": "CNNVD-201911-775"
      }
    ],
    "trust": 0.6
  }
}

VAR-201911-0260

Vulnerability from variot - Updated: 2024-11-23 21:59

Some Huawei home routers have an improper authorization vulnerability. Due to improper authorization of certain programs, an attacker can exploit this vulnerability to execute uploaded malicious files and escalate privilege. plural Huawei home The router contains an incorrect authentication vulnerability.Information is obtained, information is altered, and service operation is disrupted (DoS) There is a possibility of being put into a state. The Huawei HiRouter-CD15-10 is a wireless router from China's Huawei

Show details on source website

{
  "@context": {
    "@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
    "affected_products": {
      "@id": "https://www.variotdbs.pl/ref/affected_products"
    },
    "configurations": {
      "@id": "https://www.variotdbs.pl/ref/configurations"
    },
    "credits": {
      "@id": "https://www.variotdbs.pl/ref/credits"
    },
    "cvss": {
      "@id": "https://www.variotdbs.pl/ref/cvss/"
    },
    "description": {
      "@id": "https://www.variotdbs.pl/ref/description/"
    },
    "exploit_availability": {
      "@id": "https://www.variotdbs.pl/ref/exploit_availability/"
    },
    "external_ids": {
      "@id": "https://www.variotdbs.pl/ref/external_ids/"
    },
    "iot": {
      "@id": "https://www.variotdbs.pl/ref/iot/"
    },
    "iot_taxonomy": {
      "@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
    },
    "patch": {
      "@id": "https://www.variotdbs.pl/ref/patch/"
    },
    "problemtype_data": {
      "@id": "https://www.variotdbs.pl/ref/problemtype_data/"
    },
    "references": {
      "@id": "https://www.variotdbs.pl/ref/references/"
    },
    "sources": {
      "@id": "https://www.variotdbs.pl/ref/sources/"
    },
    "sources_release_date": {
      "@id": "https://www.variotdbs.pl/ref/sources_release_date/"
    },
    "sources_update_date": {
      "@id": "https://www.variotdbs.pl/ref/sources_update_date/"
    },
    "threat_type": {
      "@id": "https://www.variotdbs.pl/ref/threat_type/"
    },
    "title": {
      "@id": "https://www.variotdbs.pl/ref/title/"
    },
    "type": {
      "@id": "https://www.variotdbs.pl/ref/type/"
    }
  },
  "@id": "https://www.variotdbs.pl/vuln/VAR-201911-0260",
  "affected_products": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/affected_products#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        },
        "@id": "https://www.variotdbs.pl/ref/sources"
      }
    },
    "data": [
      {
        "model": "ws5200-11",
        "scope": "eq",
        "trust": 1.6,
        "vendor": "huawei",
        "version": "10.0.2.3"
      },
      {
        "model": "ws5200-11",
        "scope": "eq",
        "trust": 1.6,
        "vendor": "huawei",
        "version": "9.0.3.11"
      },
      {
        "model": "ws5280-10",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "huawei",
        "version": "10.0.2.6"
      },
      {
        "model": "cd10-10",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "huawei",
        "version": "10.0.2.7"
      },
      {
        "model": "hirouter-cd15-10",
        "scope": "gte",
        "trust": 1.0,
        "vendor": "huawei",
        "version": "9.0.2.3"
      },
      {
        "model": "hirouter-cd21-16",
        "scope": "gte",
        "trust": 1.0,
        "vendor": "huawei",
        "version": "9.0.3.9"
      },
      {
        "model": "hirouter-cd30-10",
        "scope": "gte",
        "trust": 1.0,
        "vendor": "huawei",
        "version": "10.0.2.8"
      },
      {
        "model": "ws5280-11",
        "scope": "gte",
        "trust": 1.0,
        "vendor": "huawei",
        "version": "9.0.3.22"
      },
      {
        "model": "ws6500-11",
        "scope": "gte",
        "trust": 1.0,
        "vendor": "huawei",
        "version": "10.0.2.2"
      },
      {
        "model": "hirouter-cd20-10",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "huawei",
        "version": "10.0.2.6"
      },
      {
        "model": "cd10-10",
        "scope": "gte",
        "trust": 1.0,
        "vendor": "huawei",
        "version": "10.0.2.2"
      },
      {
        "model": "hirouter-cd30-11",
        "scope": "gte",
        "trust": 1.0,
        "vendor": "huawei",
        "version": "10.0.2.8"
      },
      {
        "model": "ws826-10",
        "scope": "gte",
        "trust": 1.0,
        "vendor": "huawei",
        "version": "9.0.3.11"
      },
      {
        "model": "ws5100-10",
        "scope": "gte",
        "trust": 1.0,
        "vendor": "huawei",
        "version": "9.0.3.11"
      },
      {
        "model": "cd17-10",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "huawei",
        "version": "10.0.2.5"
      },
      {
        "model": "hirouter-cd30-10",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "huawei",
        "version": "10.0.2.9"
      },
      {
        "model": "hirouter-h1-10",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "huawei",
        "version": "10.0.2.5"
      },
      {
        "model": "ws5108-10",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "huawei",
        "version": "10.0.2.7"
      },
      {
        "model": "hirouter-cd30-11",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "huawei",
        "version": "10.0.2.9"
      },
      {
        "model": "hirouter-cd20-10",
        "scope": "gte",
        "trust": 1.0,
        "vendor": "huawei",
        "version": "9.0.3.9"
      },
      {
        "model": "ws5106-10",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "huawei",
        "version": "10.0.2.7"
      },
      {
        "model": "ws5280-10",
        "scope": "gte",
        "trust": 1.0,
        "vendor": "huawei",
        "version": "9.0.3.22"
      },
      {
        "model": "ws5200-10",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "huawei",
        "version": "10.0.2.6"
      },
      {
        "model": "ws5102-10",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "huawei",
        "version": "10.0.2.7"
      },
      {
        "model": "hirouter-cd21-16",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "huawei",
        "version": "10.0.2.5"
      },
      {
        "model": "ws5108-10",
        "scope": "gte",
        "trust": 1.0,
        "vendor": "huawei",
        "version": "10.0.2.2"
      },
      {
        "model": "hirouter-h1-10",
        "scope": "gte",
        "trust": 1.0,
        "vendor": "huawei",
        "version": "9.0.3.11"
      },
      {
        "model": "ws6500-10",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "huawei",
        "version": "10.0.2.5"
      },
      {
        "model": "hirouter-cd15-10",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "huawei",
        "version": "10.0.2.5"
      },
      {
        "model": "cd16-10",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "huawei",
        "version": "10.0.2.5"
      },
      {
        "model": "ws5106-10",
        "scope": "gte",
        "trust": 1.0,
        "vendor": "huawei",
        "version": "10.0.2.2"
      },
      {
        "model": "ws5102-10",
        "scope": "gte",
        "trust": 1.0,
        "vendor": "huawei",
        "version": "10.0.2.2"
      },
      {
        "model": "tc5200-10",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "huawei",
        "version": "10.0.2.5"
      },
      {
        "model": "cd18-10",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "huawei",
        "version": "10.0.2.5"
      },
      {
        "model": "ws5280-11",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "huawei",
        "version": "10.0.2.6"
      },
      {
        "model": "ws6500-10",
        "scope": "gte",
        "trust": 1.0,
        "vendor": "huawei",
        "version": "10.0.2.3"
      },
      {
        "model": "ws5200-10",
        "scope": "gte",
        "trust": 1.0,
        "vendor": "huawei",
        "version": "9.0.3.9"
      },
      {
        "model": "ws5100-10",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "huawei",
        "version": "10.0.2.7"
      },
      {
        "model": "ws826-10",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "huawei",
        "version": "10.0.2.5"
      },
      {
        "model": "tc5200-10",
        "scope": "gte",
        "trust": 1.0,
        "vendor": "huawei",
        "version": "10.0.2.3"
      },
      {
        "model": "cd16-10",
        "scope": "gte",
        "trust": 1.0,
        "vendor": "huawei",
        "version": "10.0.2.3"
      },
      {
        "model": "cd17-10",
        "scope": "gte",
        "trust": 1.0,
        "vendor": "huawei",
        "version": "9.0.3.3"
      },
      {
        "model": "ws6500-11",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "huawei",
        "version": "10.0.2.7"
      },
      {
        "model": "cd18-10",
        "scope": "gte",
        "trust": 1.0,
        "vendor": "huawei",
        "version": "9.0.2.23"
      },
      {
        "model": "cd10-10",
        "scope": null,
        "trust": 0.8,
        "vendor": "huawei",
        "version": null
      },
      {
        "model": "cd16-10",
        "scope": null,
        "trust": 0.8,
        "vendor": "huawei",
        "version": null
      },
      {
        "model": "cd17-10",
        "scope": null,
        "trust": 0.8,
        "vendor": "huawei",
        "version": null
      },
      {
        "model": "cd18-10",
        "scope": null,
        "trust": 0.8,
        "vendor": "huawei",
        "version": null
      },
      {
        "model": "hirouter-cd15-10",
        "scope": null,
        "trust": 0.8,
        "vendor": "huawei",
        "version": null
      },
      {
        "model": "hirouter-cd20-10",
        "scope": null,
        "trust": 0.8,
        "vendor": "huawei",
        "version": null
      },
      {
        "model": "hirouter-cd21-16",
        "scope": null,
        "trust": 0.8,
        "vendor": "huawei",
        "version": null
      },
      {
        "model": "hirouter-cd30-10",
        "scope": null,
        "trust": 0.8,
        "vendor": "huawei",
        "version": null
      },
      {
        "model": "hirouter-cd30-11",
        "scope": null,
        "trust": 0.8,
        "vendor": "huawei",
        "version": null
      },
      {
        "model": "hirouter-h1-10",
        "scope": null,
        "trust": 0.8,
        "vendor": "huawei",
        "version": null
      },
      {
        "model": "cd10-10",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "huawei",
        "version": "10.0.2.2"
      },
      {
        "model": "cd16-10",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "huawei",
        "version": "10.0.2.3"
      },
      {
        "model": "cd17-10",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "huawei",
        "version": "9.0.3.3"
      },
      {
        "model": "cd18-10",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "huawei",
        "version": "9.0.2.23"
      },
      {
        "model": "hirouter-cd15-10",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "huawei",
        "version": "9.0.2.3"
      },
      {
        "model": "hirouter-cd20-10",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "huawei",
        "version": "9.0.3.9"
      },
      {
        "model": "hirouter-cd21-16",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "huawei",
        "version": "9.0.3.9"
      },
      {
        "model": "hirouter-cd30-10",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "huawei",
        "version": "10.0.2.8"
      },
      {
        "model": "hirouter-cd30-11",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "huawei",
        "version": "10.0.2.8"
      },
      {
        "model": "hirouter-h1-10",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "huawei",
        "version": "9.0.3.11"
      },
      {
        "model": "tc5200-10",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "huawei",
        "version": "10.0.2.3"
      },
      {
        "model": "ws5100-10",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "huawei",
        "version": "9.0.3.11"
      },
      {
        "model": "ws5102-10",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "huawei",
        "version": "10.0.2.2"
      },
      {
        "model": "ws5106-10",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "huawei",
        "version": "10.0.2.2"
      },
      {
        "model": "ws5108-10",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "huawei",
        "version": "10.0.2.2"
      },
      {
        "model": "ws5200-10",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "huawei",
        "version": "9.0.3.9"
      },
      {
        "model": "ws5280-10",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "huawei",
        "version": "9.0.3.22"
      },
      {
        "model": "ws5280-11",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "huawei",
        "version": "9.0.3.22"
      },
      {
        "model": "ws6500-10",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "huawei",
        "version": "10.0.2.3"
      },
      {
        "model": "ws6500-11",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "huawei",
        "version": "10.0.2.2"
      },
      {
        "model": "ws826-10",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "huawei",
        "version": "9.0.3.11"
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2019-42426"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2019-012619"
      },
      {
        "db": "NVD",
        "id": "CVE-2019-5269"
      }
    ]
  },
  "configurations": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/configurations#",
      "children": {
        "@container": "@list"
      },
      "cpe_match": {
        "@container": "@list"
      },
      "data": {
        "@container": "@list"
      },
      "nodes": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "CVE_data_version": "4.0",
        "nodes": [
          {
            "cpe_match": [
              {
                "cpe22Uri": "cpe:/o:huawei:cd10-10_firmware",
                "vulnerable": true
              },
              {
                "cpe22Uri": "cpe:/o:huawei:cd16-10_firmware",
                "vulnerable": true
              },
              {
                "cpe22Uri": "cpe:/o:huawei:cd17-10_firmware",
                "vulnerable": true
              },
              {
                "cpe22Uri": "cpe:/o:huawei:cd18-10_firmware",
                "vulnerable": true
              },
              {
                "cpe22Uri": "cpe:/o:huawei:hirouter-cd15-10_firmware",
                "vulnerable": true
              },
              {
                "cpe22Uri": "cpe:/o:huawei:hirouter-cd20-10_firmware",
                "vulnerable": true
              },
              {
                "cpe22Uri": "cpe:/o:huawei:hirouter-cd21-16_firmware",
                "vulnerable": true
              },
              {
                "cpe22Uri": "cpe:/o:huawei:hirouter-cd30-10_firmware",
                "vulnerable": true
              },
              {
                "cpe22Uri": "cpe:/o:huawei:hirouter-cd30-11_firmware",
                "vulnerable": true
              },
              {
                "cpe22Uri": "cpe:/o:huawei:hirouter-h1-10_firmware",
                "vulnerable": true
              }
            ],
            "operator": "OR"
          }
        ]
      }
    ],
    "sources": [
      {
        "db": "JVNDB",
        "id": "JVNDB-2019-012619"
      }
    ]
  },
  "credits": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/credits#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "Changting Technology Security Lab of Beijing Changting Technology Co., Ltd.",
    "sources": [
      {
        "db": "CNNVD",
        "id": "CNNVD-201911-773"
      }
    ],
    "trust": 0.6
  },
  "cve": "CVE-2019-5269",
  "cvss": {
    "@context": {
      "cvssV2": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
      },
      "cvssV3": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
      },
      "severity": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/cvss/severity#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/severity"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        },
        "@id": "https://www.variotdbs.pl/ref/sources"
      }
    },
    "data": [
      {
        "cvssV2": [
          {
            "accessComplexity": "LOW",
            "accessVector": "LOCAL",
            "authentication": "NONE",
            "author": "nvd@nist.gov",
            "availabilityImpact": "PARTIAL",
            "baseScore": 4.6,
            "confidentialityImpact": "PARTIAL",
            "exploitabilityScore": 3.9,
            "id": "CVE-2019-5269",
            "impactScore": 6.4,
            "integrityImpact": "PARTIAL",
            "severity": "MEDIUM",
            "trust": 1.8,
            "vectorString": "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          {
            "accessComplexity": "LOW",
            "accessVector": "LOCAL",
            "authentication": "NONE",
            "author": "CNVD",
            "availabilityImpact": "COMPLETE",
            "baseScore": 7.2,
            "confidentialityImpact": "COMPLETE",
            "exploitabilityScore": 3.9,
            "id": "CNVD-2019-42426",
            "impactScore": 10.0,
            "integrityImpact": "COMPLETE",
            "severity": "HIGH",
            "trust": 0.6,
            "vectorString": "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "version": "2.0"
          }
        ],
        "cvssV3": [
          {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "author": "nvd@nist.gov",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "exploitabilityScore": 1.8,
            "id": "CVE-2019-5269",
            "impactScore": 5.9,
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "trust": 1.0,
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          {
            "attackComplexity": "Low",
            "attackVector": "Local",
            "author": "NVD",
            "availabilityImpact": "High",
            "baseScore": 7.8,
            "baseSeverity": "High",
            "confidentialityImpact": "High",
            "exploitabilityScore": null,
            "id": "CVE-2019-5269",
            "impactScore": null,
            "integrityImpact": "High",
            "privilegesRequired": "Low",
            "scope": "Unchanged",
            "trust": 0.8,
            "userInteraction": "None",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.0"
          }
        ],
        "severity": [
          {
            "author": "nvd@nist.gov",
            "id": "CVE-2019-5269",
            "trust": 1.0,
            "value": "HIGH"
          },
          {
            "author": "NVD",
            "id": "CVE-2019-5269",
            "trust": 0.8,
            "value": "High"
          },
          {
            "author": "CNVD",
            "id": "CNVD-2019-42426",
            "trust": 0.6,
            "value": "HIGH"
          },
          {
            "author": "CNNVD",
            "id": "CNNVD-201911-773",
            "trust": 0.6,
            "value": "HIGH"
          }
        ]
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2019-42426"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2019-012619"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201911-773"
      },
      {
        "db": "NVD",
        "id": "CVE-2019-5269"
      }
    ]
  },
  "description": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/description#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "Some Huawei home routers have an improper authorization vulnerability. Due to improper authorization of certain programs, an attacker can exploit this vulnerability to execute uploaded malicious files and escalate privilege. plural Huawei home The router contains an incorrect authentication vulnerability.Information is obtained, information is altered, and service operation is disrupted (DoS) There is a possibility of being put into a state. The Huawei HiRouter-CD15-10 is a wireless router from China\u0027s Huawei",
    "sources": [
      {
        "db": "NVD",
        "id": "CVE-2019-5269"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2019-012619"
      },
      {
        "db": "CNVD",
        "id": "CNVD-2019-42426"
      }
    ],
    "trust": 2.16
  },
  "external_ids": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/external_ids#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "db": "NVD",
        "id": "CVE-2019-5269",
        "trust": 3.0
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2019-012619",
        "trust": 0.8
      },
      {
        "db": "CNVD",
        "id": "CNVD-2019-42426",
        "trust": 0.6
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201911-773",
        "trust": 0.6
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2019-42426"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2019-012619"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201911-773"
      },
      {
        "db": "NVD",
        "id": "CVE-2019-5269"
      }
    ]
  },
  "id": "VAR-201911-0260",
  "iot": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/iot#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": true,
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2019-42426"
      }
    ],
    "trust": 1.2980519618181818
  },
  "iot_taxonomy": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "category": [
          "Network device"
        ],
        "sub_category": null,
        "trust": 0.6
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2019-42426"
      }
    ]
  },
  "last_update_date": "2024-11-23T21:59:38.945000Z",
  "patch": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/patch#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "title": "huawei-sa-20191113-01-homerouter",
        "trust": 0.8,
        "url": "https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20191113-01-homerouter-en"
      },
      {
        "title": "Patch for Improper authorization vulnerability for multiple Huawei products",
        "trust": 0.6,
        "url": "https://www.cnvd.org.cn/patchInfo/show/192095"
      },
      {
        "title": "Multiple Huawei Product security vulnerabilities",
        "trust": 0.6,
        "url": "http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=104250"
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2019-42426"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2019-012619"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201911-773"
      }
    ]
  },
  "problemtype_data": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "problemtype": "NVD-CWE-noinfo",
        "trust": 1.0
      },
      {
        "problemtype": "CWE-863",
        "trust": 0.8
      }
    ],
    "sources": [
      {
        "db": "JVNDB",
        "id": "JVNDB-2019-012619"
      },
      {
        "db": "NVD",
        "id": "CVE-2019-5269"
      }
    ]
  },
  "references": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/references#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "trust": 1.6,
        "url": "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20191113-01-homerouter-en"
      },
      {
        "trust": 1.4,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2019-5269"
      },
      {
        "trust": 1.2,
        "url": "https://www.huawei.com/cn/psirt/security-advisories/huawei-sa-20191113-01-homerouter-cn"
      },
      {
        "trust": 0.8,
        "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-5269"
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2019-42426"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2019-012619"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201911-773"
      },
      {
        "db": "NVD",
        "id": "CVE-2019-5269"
      }
    ]
  },
  "sources": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "db": "CNVD",
        "id": "CNVD-2019-42426"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2019-012619"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201911-773"
      },
      {
        "db": "NVD",
        "id": "CVE-2019-5269"
      }
    ]
  },
  "sources_release_date": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "date": "2019-11-27T00:00:00",
        "db": "CNVD",
        "id": "CNVD-2019-42426"
      },
      {
        "date": "2019-12-09T00:00:00",
        "db": "JVNDB",
        "id": "JVNDB-2019-012619"
      },
      {
        "date": "2019-11-13T00:00:00",
        "db": "CNNVD",
        "id": "CNNVD-201911-773"
      },
      {
        "date": "2019-11-29T20:15:12.083000",
        "db": "NVD",
        "id": "CVE-2019-5269"
      }
    ]
  },
  "sources_update_date": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "date": "2019-11-27T00:00:00",
        "db": "CNVD",
        "id": "CNVD-2019-42426"
      },
      {
        "date": "2019-12-09T00:00:00",
        "db": "JVNDB",
        "id": "JVNDB-2019-012619"
      },
      {
        "date": "2020-08-25T00:00:00",
        "db": "CNNVD",
        "id": "CNNVD-201911-773"
      },
      {
        "date": "2024-11-21T04:44:38.663000",
        "db": "NVD",
        "id": "CVE-2019-5269"
      }
    ]
  },
  "threat_type": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/threat_type#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "local",
    "sources": [
      {
        "db": "CNNVD",
        "id": "CNNVD-201911-773"
      }
    ],
    "trust": 0.6
  },
  "title": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/title#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "plural  Huawei home Unauthorized authentication vulnerabilities in routers",
    "sources": [
      {
        "db": "JVNDB",
        "id": "JVNDB-2019-012619"
      }
    ],
    "trust": 0.8
  },
  "type": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/type#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "other",
    "sources": [
      {
        "db": "CNNVD",
        "id": "CNNVD-201911-773"
      }
    ],
    "trust": 0.6
  }
}

VAR-202005-0971

Vulnerability from variot - Updated: 2024-11-23 21:51

There is an information leakage vulnerability in some Huawei products. An unauthenticated, adjacent attacker could exploit this vulnerability to decrypt data. Successful exploitation may leak information randomly. Affected product versions include: Anne-AL00 Versions earlier than 9.1.0.331(C675E9R1P3T8); Berkeley-L09 Versions earlier than 10.0.1.1(C675R1); CD16-10 Versions earlier than 10.0.2.8; CD17-10 Versions earlier than 10.0.2.8; CD17-16 Versions earlier than 10.0.2.8; CD18-10 Versions earlier than 10.0.2.8; CD18-16 Versions earlier than 10.0.2.8; Columbia-TL00B Versions earlier than 9.0.0.187(C01E181R1P20T8); E6878-370 Versions earlier than 10.0.5.1(H610SP10C00); HUAWEI P30 lite Versions earlier than 10.0.0.185(C605E3R1P3), Versions earlier than 10.0.0.197(C432E8R2P7); HUAWEI nova 4e Versions earlier than 10.0.0.158(C00E64R1P9); Honor 10 Lite 9.0.1.113(C675E11R1P12); LelandP-L22A Versions earlier than 9.1.0.166(C675E5R1P4T8); Marie-AL00AX Versions earlier than 10.0.0.158(C00E64R1P9); Marie-AL00AY Versions earlier than 10.0.0.158(C00E64R1P9); Marie-AL00BX Versions earlier than 10.0.0.158(C00E64R1P9); Marie-L03BX Versions earlier than 10.0.0.188(C605E5R1P1); Marie-L21BX Versions earlier than 10.0.0.188(C432E4R4P1), Versions earlier than 10.0.0.188(C461E5R3P1); Marie-L22BX Versions earlier than 10.0.0.188(C636E3R3P1); Marie-L23BX Versions earlier than 10.0.0.188(C605E5R1P1); TC5200-16 Versions earlier than 10.0.2.8; WS5200-11 Versions earlier than 10.0.2.8; WS5200-12 Versions earlier than 10.0.2.23; WS5200-16 Versions earlier than 10.0.2.8; WS5200-17 Versions earlier than 10.0.2.23; WS5800-10 Versions earlier than 10.0.3.27; WS6500-10 Versions earlier than 10.0.2.8; WS6500-16 Versions earlier than 10.0.2.8. Huawei Anne-AL00 and other products are products of China's Huawei company. Huawei Anne-AL00 is a smartphone. Honor 10 Lite is a smartphone. Huawei TC5200-16 is a wireless router

Show details on source website

{
  "@context": {
    "@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
    "affected_products": {
      "@id": "https://www.variotdbs.pl/ref/affected_products"
    },
    "configurations": {
      "@id": "https://www.variotdbs.pl/ref/configurations"
    },
    "credits": {
      "@id": "https://www.variotdbs.pl/ref/credits"
    },
    "cvss": {
      "@id": "https://www.variotdbs.pl/ref/cvss/"
    },
    "description": {
      "@id": "https://www.variotdbs.pl/ref/description/"
    },
    "exploit_availability": {
      "@id": "https://www.variotdbs.pl/ref/exploit_availability/"
    },
    "external_ids": {
      "@id": "https://www.variotdbs.pl/ref/external_ids/"
    },
    "iot": {
      "@id": "https://www.variotdbs.pl/ref/iot/"
    },
    "iot_taxonomy": {
      "@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
    },
    "patch": {
      "@id": "https://www.variotdbs.pl/ref/patch/"
    },
    "problemtype_data": {
      "@id": "https://www.variotdbs.pl/ref/problemtype_data/"
    },
    "references": {
      "@id": "https://www.variotdbs.pl/ref/references/"
    },
    "sources": {
      "@id": "https://www.variotdbs.pl/ref/sources/"
    },
    "sources_release_date": {
      "@id": "https://www.variotdbs.pl/ref/sources_release_date/"
    },
    "sources_update_date": {
      "@id": "https://www.variotdbs.pl/ref/sources_update_date/"
    },
    "threat_type": {
      "@id": "https://www.variotdbs.pl/ref/threat_type/"
    },
    "title": {
      "@id": "https://www.variotdbs.pl/ref/title/"
    },
    "type": {
      "@id": "https://www.variotdbs.pl/ref/type/"
    }
  },
  "@id": "https://www.variotdbs.pl/vuln/VAR-202005-0971",
  "affected_products": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/affected_products#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        },
        "@id": "https://www.variotdbs.pl/ref/sources"
      }
    },
    "data": [
      {
        "model": "marie-l21bx \u003c=10.0.0.188",
        "scope": null,
        "trust": 1.2,
        "vendor": "huawei",
        "version": null
      },
      {
        "model": "honor 10 lite",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "huawei",
        "version": "10.0.0.182\\(c675e17r2p2\\)"
      },
      {
        "model": "ws5800-10",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "huawei",
        "version": "10.0.3.27"
      },
      {
        "model": "columbia-tl00b",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "huawei",
        "version": "9.0.0.187\\(c01e181r1p20t8\\)"
      },
      {
        "model": "ws5200-16",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "huawei",
        "version": "10.0.2.8"
      },
      {
        "model": "ws6500-16",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "huawei",
        "version": "10.0.2.8"
      },
      {
        "model": "cd16-10",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "huawei",
        "version": "10.0.2.8"
      },
      {
        "model": "cd17-10",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "huawei",
        "version": "10.0.2.8"
      },
      {
        "model": "cd18-10",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "huawei",
        "version": "10.0.2.8"
      },
      {
        "model": "tc5200-16",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "huawei",
        "version": "10.0.2.8"
      },
      {
        "model": "e6878-370",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "huawei",
        "version": "10.0.5.1\\(h610sp10c00\\)"
      },
      {
        "model": "anne-al00",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "huawei",
        "version": "9.1.0.331\\(c675e9r1p3t8\\)"
      },
      {
        "model": "cd18-16",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "huawei",
        "version": "10.0.2.8"
      },
      {
        "model": "ws5200-17",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "huawei",
        "version": "10.0.2.23"
      },
      {
        "model": "ws5200-11",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "huawei",
        "version": "10.0.2.23"
      },
      {
        "model": "cd17-16",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "huawei",
        "version": "10.0.2.8"
      },
      {
        "model": "berkeley-l09",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "huawei",
        "version": "10.0.1.1\\(c675r1\\)"
      },
      {
        "model": "ws5200-11",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "huawei",
        "version": "10.0.2.8"
      },
      {
        "model": "lelandp-l22a",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "huawei",
        "version": "9.1.0.166\\(c675e5r1p4t8\\)"
      },
      {
        "model": "ws6500-10",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "huawei",
        "version": "10.0.2.8"
      },
      {
        "model": "anne-al00",
        "scope": "eq",
        "trust": 0.8,
        "vendor": "huawei",
        "version": "9.1.0.331(c675e9r1p3t8)"
      },
      {
        "model": "berkeley-l09",
        "scope": "eq",
        "trust": 0.8,
        "vendor": "huawei",
        "version": "10.0.1.1(c675r1)"
      },
      {
        "model": "cd16-10",
        "scope": "eq",
        "trust": 0.8,
        "vendor": "huawei",
        "version": "10.0.2.8"
      },
      {
        "model": "cd17-10",
        "scope": "eq",
        "trust": 0.8,
        "vendor": "huawei",
        "version": "10.0.2.8"
      },
      {
        "model": "cd17-16",
        "scope": "eq",
        "trust": 0.8,
        "vendor": "huawei",
        "version": "10.0.2.8"
      },
      {
        "model": "cd18-10",
        "scope": "eq",
        "trust": 0.8,
        "vendor": "huawei",
        "version": "10.0.2.8"
      },
      {
        "model": "cd18-16",
        "scope": "eq",
        "trust": 0.8,
        "vendor": "huawei",
        "version": "10.0.2.8"
      },
      {
        "model": "columbia-tl00b",
        "scope": "eq",
        "trust": 0.8,
        "vendor": "huawei",
        "version": "9.0.0.187(c01e181r1p20t8)"
      },
      {
        "model": "e6878-370",
        "scope": "eq",
        "trust": 0.8,
        "vendor": "huawei",
        "version": "10.0.5.1(h610sp10c00)"
      },
      {
        "model": "honor 10 lite",
        "scope": "eq",
        "trust": 0.8,
        "vendor": "huawei",
        "version": "9.0.1.113(c675e11r1p12)"
      },
      {
        "model": "anne-al00 \u003c=9.1.0.331",
        "scope": null,
        "trust": 0.6,
        "vendor": "huawei",
        "version": null
      },
      {
        "model": "berkeley-l09 \u003c=10.0.1.1",
        "scope": null,
        "trust": 0.6,
        "vendor": "huawei",
        "version": null
      },
      {
        "model": "cd16-10",
        "scope": "lte",
        "trust": 0.6,
        "vendor": "huawei",
        "version": "\u003c=10.0.2.8"
      },
      {
        "model": "cd17-10",
        "scope": "lte",
        "trust": 0.6,
        "vendor": "huawei",
        "version": "\u003c=10.0.2.8"
      },
      {
        "model": "cd17-16",
        "scope": "lte",
        "trust": 0.6,
        "vendor": "huawei",
        "version": "\u003c=10.0.2.8"
      },
      {
        "model": "cd18-10",
        "scope": "lte",
        "trust": 0.6,
        "vendor": "huawei",
        "version": "\u003c=10.0.2.8"
      },
      {
        "model": "cd18-16",
        "scope": "lte",
        "trust": 0.6,
        "vendor": "huawei",
        "version": "\u003c=10.0.2.8"
      },
      {
        "model": "columbia-tl00b \u003c=9.0.0.187",
        "scope": null,
        "trust": 0.6,
        "vendor": "huawei",
        "version": null
      },
      {
        "model": "e6878-370 \u003c=10.0.5.1",
        "scope": null,
        "trust": 0.6,
        "vendor": "huawei",
        "version": null
      },
      {
        "model": "p30 lite \u003c=10.0.0.185",
        "scope": null,
        "trust": 0.6,
        "vendor": "huawei",
        "version": null
      },
      {
        "model": "p30 lite \u003c=10.0.0.197",
        "scope": null,
        "trust": 0.6,
        "vendor": "huawei",
        "version": null
      },
      {
        "model": "nova 4e \u003c=10.0.0.158",
        "scope": null,
        "trust": 0.6,
        "vendor": "huawei",
        "version": null
      },
      {
        "model": "honor lite 9.0.1.113",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "huawei",
        "version": "10"
      },
      {
        "model": "lelandp-l22a \u003c=9.1.0.166",
        "scope": null,
        "trust": 0.6,
        "vendor": "huawei",
        "version": null
      },
      {
        "model": "marie-al00ax \u003c=10.0.0.158",
        "scope": null,
        "trust": 0.6,
        "vendor": "huawei",
        "version": null
      },
      {
        "model": "marie-al00bx \u003c=10.0.0.158",
        "scope": null,
        "trust": 0.6,
        "vendor": "huawei",
        "version": null
      },
      {
        "model": "marie-l22bx \u003c=10.0.0.188",
        "scope": null,
        "trust": 0.6,
        "vendor": "huawei",
        "version": null
      },
      {
        "model": "marie-l23bx \u003c=10.0.0.188",
        "scope": null,
        "trust": 0.6,
        "vendor": "huawei",
        "version": null
      },
      {
        "model": "tc5200-16",
        "scope": "lte",
        "trust": 0.6,
        "vendor": "huawei",
        "version": "\u003c=10.0.2.8"
      },
      {
        "model": "ws5200-11",
        "scope": "lte",
        "trust": 0.6,
        "vendor": "huawei",
        "version": "\u003c=10.0.2.8"
      },
      {
        "model": "ws5200-12",
        "scope": "lte",
        "trust": 0.6,
        "vendor": "huawei",
        "version": "\u003c=10.0.2.23"
      },
      {
        "model": "ws5200-16",
        "scope": "lte",
        "trust": 0.6,
        "vendor": "huawei",
        "version": "\u003c=10.0.2.8"
      },
      {
        "model": "ws5200-17",
        "scope": "lte",
        "trust": 0.6,
        "vendor": "huawei",
        "version": "\u003c=10.0.2.23"
      },
      {
        "model": "ws5800-10",
        "scope": "lte",
        "trust": 0.6,
        "vendor": "huawei",
        "version": "\u003c=10.0.3.27"
      },
      {
        "model": "ws6500-10",
        "scope": "lte",
        "trust": 0.6,
        "vendor": "huawei",
        "version": "\u003c=10.0.2.8"
      },
      {
        "model": "ws6500-16",
        "scope": "lte",
        "trust": 0.6,
        "vendor": "huawei",
        "version": "\u003c=10.0.2.8"
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2020-36726"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2020-005593"
      },
      {
        "db": "NVD",
        "id": "CVE-2020-9069"
      }
    ]
  },
  "configurations": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/configurations#",
      "children": {
        "@container": "@list"
      },
      "cpe_match": {
        "@container": "@list"
      },
      "data": {
        "@container": "@list"
      },
      "nodes": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "CVE_data_version": "4.0",
        "nodes": [
          {
            "cpe_match": [
              {
                "cpe22Uri": "cpe:/o:huawei:anne-al00_firmware",
                "vulnerable": true
              },
              {
                "cpe22Uri": "cpe:/o:huawei:berkeley-l09_firmware",
                "vulnerable": true
              },
              {
                "cpe22Uri": "cpe:/o:huawei:cd16-10_firmware",
                "vulnerable": true
              },
              {
                "cpe22Uri": "cpe:/o:huawei:cd17-10_firmware",
                "vulnerable": true
              },
              {
                "cpe22Uri": "cpe:/o:huawei:cd17-16_firmware",
                "vulnerable": true
              },
              {
                "cpe22Uri": "cpe:/o:huawei:cd18-10_firmware",
                "vulnerable": true
              },
              {
                "cpe22Uri": "cpe:/o:huawei:cd18-16_firmware",
                "vulnerable": true
              },
              {
                "cpe22Uri": "cpe:/o:huawei:columbia-tl00b_firmware",
                "vulnerable": true
              },
              {
                "cpe22Uri": "cpe:/o:huawei:e6878-370_firmware",
                "vulnerable": true
              },
              {
                "cpe22Uri": "cpe:/o:huawei:honor_10_lite_firmware",
                "vulnerable": true
              }
            ],
            "operator": "OR"
          }
        ]
      }
    ],
    "sources": [
      {
        "db": "JVNDB",
        "id": "JVNDB-2020-005593"
      }
    ]
  },
  "cve": "CVE-2020-9069",
  "cvss": {
    "@context": {
      "cvssV2": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
      },
      "cvssV3": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
      },
      "severity": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/cvss/severity#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/severity"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        },
        "@id": "https://www.variotdbs.pl/ref/sources"
      }
    },
    "data": [
      {
        "cvssV2": [
          {
            "accessComplexity": "LOW",
            "accessVector": "ADJACENT_NETWORK",
            "authentication": "NONE",
            "author": "nvd@nist.gov",
            "availabilityImpact": "NONE",
            "baseScore": 3.3,
            "confidentialityImpact": "PARTIAL",
            "exploitabilityScore": 6.5,
            "id": "CVE-2020-9069",
            "impactScore": 2.9,
            "integrityImpact": "NONE",
            "severity": "LOW",
            "trust": 1.0,
            "vectorString": "AV:A/AC:L/Au:N/C:P/I:N/A:N",
            "version": "2.0"
          },
          {
            "acInsufInfo": null,
            "accessComplexity": "Low",
            "accessVector": "Adjacent Network",
            "authentication": "None",
            "author": "NVD",
            "availabilityImpact": "None",
            "baseScore": 3.3,
            "confidentialityImpact": "Partial",
            "exploitabilityScore": null,
            "id": "JVNDB-2020-005593",
            "impactScore": null,
            "integrityImpact": "None",
            "obtainAllPrivilege": null,
            "obtainOtherPrivilege": null,
            "obtainUserPrivilege": null,
            "severity": "Low",
            "trust": 0.8,
            "userInteractionRequired": null,
            "vectorString": "AV:A/AC:L/Au:N/C:P/I:N/A:N",
            "version": "2.0"
          },
          {
            "accessComplexity": "LOW",
            "accessVector": "ADJACENT_NETWORK",
            "authentication": "NONE",
            "author": "CNVD",
            "availabilityImpact": "NONE",
            "baseScore": 3.3,
            "confidentialityImpact": "PARTIAL",
            "exploitabilityScore": 6.5,
            "id": "CNVD-2020-36726",
            "impactScore": 2.9,
            "integrityImpact": "NONE",
            "severity": "LOW",
            "trust": 0.6,
            "vectorString": "AV:A/AC:L/Au:N/C:P/I:N/A:N",
            "version": "2.0"
          }
        ],
        "cvssV3": [
          {
            "attackComplexity": "LOW",
            "attackVector": "ADJACENT",
            "author": "nvd@nist.gov",
            "availabilityImpact": "NONE",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "exploitabilityScore": 2.8,
            "id": "CVE-2020-9069",
            "impactScore": 3.6,
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "trust": 1.0,
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          {
            "attackComplexity": "Low",
            "attackVector": "Adjacent Network",
            "author": "NVD",
            "availabilityImpact": "None",
            "baseScore": 6.5,
            "baseSeverity": "Medium",
            "confidentialityImpact": "High",
            "exploitabilityScore": null,
            "id": "JVNDB-2020-005593",
            "impactScore": null,
            "integrityImpact": "None",
            "privilegesRequired": "None",
            "scope": "Unchanged",
            "trust": 0.8,
            "userInteraction": "None",
            "vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.0"
          }
        ],
        "severity": [
          {
            "author": "nvd@nist.gov",
            "id": "CVE-2020-9069",
            "trust": 1.0,
            "value": "MEDIUM"
          },
          {
            "author": "NVD",
            "id": "JVNDB-2020-005593",
            "trust": 0.8,
            "value": "Medium"
          },
          {
            "author": "CNVD",
            "id": "CNVD-2020-36726",
            "trust": 0.6,
            "value": "LOW"
          },
          {
            "author": "CNNVD",
            "id": "CNNVD-202005-1099",
            "trust": 0.6,
            "value": "MEDIUM"
          }
        ]
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2020-36726"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2020-005593"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-202005-1099"
      },
      {
        "db": "NVD",
        "id": "CVE-2020-9069"
      }
    ]
  },
  "description": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/description#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "There is an information leakage vulnerability in some Huawei products. An unauthenticated, adjacent attacker could exploit this vulnerability to decrypt data. Successful exploitation may leak information randomly. Affected product versions include: Anne-AL00 Versions earlier than 9.1.0.331(C675E9R1P3T8); Berkeley-L09 Versions earlier than 10.0.1.1(C675R1); CD16-10 Versions earlier than 10.0.2.8; CD17-10 Versions earlier than 10.0.2.8; CD17-16 Versions earlier than 10.0.2.8; CD18-10 Versions earlier than 10.0.2.8; CD18-16 Versions earlier than 10.0.2.8; Columbia-TL00B Versions earlier than 9.0.0.187(C01E181R1P20T8); E6878-370 Versions earlier than 10.0.5.1(H610SP10C00); HUAWEI P30 lite Versions earlier than 10.0.0.185(C605E3R1P3), Versions earlier than 10.0.0.197(C432E8R2P7); HUAWEI nova 4e Versions earlier than 10.0.0.158(C00E64R1P9); Honor 10 Lite 9.0.1.113(C675E11R1P12); LelandP-L22A Versions earlier than 9.1.0.166(C675E5R1P4T8); Marie-AL00AX Versions earlier than 10.0.0.158(C00E64R1P9); Marie-AL00AY Versions earlier than 10.0.0.158(C00E64R1P9); Marie-AL00BX Versions earlier than 10.0.0.158(C00E64R1P9); Marie-L03BX Versions earlier than 10.0.0.188(C605E5R1P1); Marie-L21BX Versions earlier than 10.0.0.188(C432E4R4P1), Versions earlier than 10.0.0.188(C461E5R3P1); Marie-L22BX Versions earlier than 10.0.0.188(C636E3R3P1); Marie-L23BX Versions earlier than 10.0.0.188(C605E5R1P1); TC5200-16 Versions earlier than 10.0.2.8; WS5200-11 Versions earlier than 10.0.2.8; WS5200-12 Versions earlier than 10.0.2.23; WS5200-16 Versions earlier than 10.0.2.8; WS5200-17 Versions earlier than 10.0.2.23; WS5800-10 Versions earlier than 10.0.3.27; WS6500-10 Versions earlier than 10.0.2.8; WS6500-16 Versions earlier than 10.0.2.8. Huawei Anne-AL00 and other products are products of China\u0027s Huawei company. Huawei Anne-AL00 is a smartphone. Honor 10 Lite is a smartphone. Huawei TC5200-16 is a wireless router",
    "sources": [
      {
        "db": "NVD",
        "id": "CVE-2020-9069"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2020-005593"
      },
      {
        "db": "CNVD",
        "id": "CNVD-2020-36726"
      }
    ],
    "trust": 2.16
  },
  "external_ids": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/external_ids#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "db": "NVD",
        "id": "CVE-2020-9069",
        "trust": 3.0
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2020-005593",
        "trust": 0.8
      },
      {
        "db": "CNVD",
        "id": "CNVD-2020-36726",
        "trust": 0.6
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-202005-1099",
        "trust": 0.6
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2020-36726"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2020-005593"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-202005-1099"
      },
      {
        "db": "NVD",
        "id": "CVE-2020-9069"
      }
    ]
  },
  "id": "VAR-202005-0971",
  "iot": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/iot#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": true,
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2020-36726"
      }
    ],
    "trust": 1.3586212199999999
  },
  "iot_taxonomy": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "category": [
          "IoT"
        ],
        "sub_category": null,
        "trust": 0.6
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2020-36726"
      }
    ]
  },
  "last_update_date": "2024-11-23T21:51:28.931000Z",
  "patch": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/patch#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "title": "huawei-sa-20200520-01-leakage",
        "trust": 0.8,
        "url": "https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200520-01-leakage-en"
      },
      {
        "title": "Patch for Multiple Huawei product information disclosure vulnerabilities (CNVD-2020-36726)",
        "trust": 0.6,
        "url": "https://www.cnvd.org.cn/patchInfo/show/224779"
      },
      {
        "title": "Multiple Huawei Product information disclosure vulnerability repair measures",
        "trust": 0.6,
        "url": "http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=119391"
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2020-36726"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2020-005593"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-202005-1099"
      }
    ]
  },
  "problemtype_data": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "problemtype": "NVD-CWE-noinfo",
        "trust": 1.0
      },
      {
        "problemtype": "CWE-200",
        "trust": 0.8
      }
    ],
    "sources": [
      {
        "db": "JVNDB",
        "id": "JVNDB-2020-005593"
      },
      {
        "db": "NVD",
        "id": "CVE-2020-9069"
      }
    ]
  },
  "references": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/references#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "trust": 2.0,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2020-9069"
      },
      {
        "trust": 1.6,
        "url": "https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200520-01-leakage-en"
      },
      {
        "trust": 0.8,
        "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2020-9069"
      },
      {
        "trust": 0.6,
        "url": "https://www.huawei.com/cn/psirt/security-advisories/huawei-sa-20200520-01-leakage-cn"
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2020-36726"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2020-005593"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-202005-1099"
      },
      {
        "db": "NVD",
        "id": "CVE-2020-9069"
      }
    ]
  },
  "sources": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "db": "CNVD",
        "id": "CNVD-2020-36726"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2020-005593"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-202005-1099"
      },
      {
        "db": "NVD",
        "id": "CVE-2020-9069"
      }
    ]
  },
  "sources_release_date": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "date": "2020-07-07T00:00:00",
        "db": "CNVD",
        "id": "CNVD-2020-36726"
      },
      {
        "date": "2020-06-18T00:00:00",
        "db": "JVNDB",
        "id": "JVNDB-2020-005593"
      },
      {
        "date": "2020-05-20T00:00:00",
        "db": "CNNVD",
        "id": "CNNVD-202005-1099"
      },
      {
        "date": "2020-05-21T15:15:10.123000",
        "db": "NVD",
        "id": "CVE-2020-9069"
      }
    ]
  },
  "sources_update_date": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "date": "2020-07-07T00:00:00",
        "db": "CNVD",
        "id": "CNVD-2020-36726"
      },
      {
        "date": "2020-06-18T00:00:00",
        "db": "JVNDB",
        "id": "JVNDB-2020-005593"
      },
      {
        "date": "2020-07-30T00:00:00",
        "db": "CNNVD",
        "id": "CNNVD-202005-1099"
      },
      {
        "date": "2024-11-21T05:39:57.940000",
        "db": "NVD",
        "id": "CVE-2020-9069"
      }
    ]
  },
  "threat_type": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/threat_type#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "remote or local",
    "sources": [
      {
        "db": "CNNVD",
        "id": "CNNVD-202005-1099"
      }
    ],
    "trust": 0.6
  },
  "title": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/title#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "plural  Huawei Information leakage vulnerabilities in products",
    "sources": [
      {
        "db": "JVNDB",
        "id": "JVNDB-2020-005593"
      }
    ],
    "trust": 0.8
  },
  "type": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/type#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "information disclosure",
    "sources": [
      {
        "db": "CNNVD",
        "id": "CNNVD-202005-1099"
      }
    ],
    "trust": 0.6
  }
}

CVE-2020-9069 (GCVE-0-2020-9069)

Vulnerability from nvd – Published: 2020-05-21 14:19 – Updated: 2024-08-04 10:19
VLAI?
Summary
There is an information leakage vulnerability in some Huawei products. An unauthenticated, adjacent attacker could exploit this vulnerability to decrypt data. Successful exploitation may leak information randomly. Affected product versions include: Anne-AL00 Versions earlier than 9.1.0.331(C675E9R1P3T8); Berkeley-L09 Versions earlier than 10.0.1.1(C675R1); CD16-10 Versions earlier than 10.0.2.8; CD17-10 Versions earlier than 10.0.2.8; CD17-16 Versions earlier than 10.0.2.8; CD18-10 Versions earlier than 10.0.2.8; CD18-16 Versions earlier than 10.0.2.8; Columbia-TL00B Versions earlier than 9.0.0.187(C01E181R1P20T8); E6878-370 Versions earlier than 10.0.5.1(H610SP10C00); HUAWEI P30 lite Versions earlier than 10.0.0.185(C605E3R1P3), Versions earlier than 10.0.0.197(C432E8R2P7); HUAWEI nova 4e Versions earlier than 10.0.0.158(C00E64R1P9); Honor 10 Lite 9.0.1.113(C675E11R1P12); LelandP-L22A Versions earlier than 9.1.0.166(C675E5R1P4T8); Marie-AL00AX Versions earlier than 10.0.0.158(C00E64R1P9); Marie-AL00AY Versions earlier than 10.0.0.158(C00E64R1P9); Marie-AL00BX Versions earlier than 10.0.0.158(C00E64R1P9); Marie-L03BX Versions earlier than 10.0.0.188(C605E5R1P1); Marie-L21BX Versions earlier than 10.0.0.188(C432E4R4P1), Versions earlier than 10.0.0.188(C461E5R3P1); Marie-L22BX Versions earlier than 10.0.0.188(C636E3R3P1); Marie-L23BX Versions earlier than 10.0.0.188(C605E5R1P1); TC5200-16 Versions earlier than 10.0.2.8; WS5200-11 Versions earlier than 10.0.2.8; WS5200-12 Versions earlier than 10.0.2.23; WS5200-16 Versions earlier than 10.0.2.8; WS5200-17 Versions earlier than 10.0.2.23; WS5800-10 Versions earlier than 10.0.3.27; WS6500-10 Versions earlier than 10.0.2.8; WS6500-16 Versions earlier than 10.0.2.8
Severity ?
No CVSS data available.
CWE
  • Information Leakage
Assigner
References
Impacted products
Vendor Product Version
HUAWEI Anne-AL00 Affected: earlier than 9.1.0.331(C675E9R1P3T8)
Create a notification for this product.
    HUAWEI Berkeley-L09 Affected: earlier than 10.0.1.1(C675R1)
Create a notification for this product.
    HUAWEI CD16-10 Affected: earlier than 10.0.2.8
Create a notification for this product.
    HUAWEI CD17-10 Affected: earlier than 10.0.2.8
Create a notification for this product.
    HUAWEI CD17-16 Affected: earlier than 10.0.2.8
Create a notification for this product.
    HUAWEI CD18-10 Affected: earlier than 10.0.2.8
Create a notification for this product.
    HUAWEI CD18-16 Affected: earlier than 10.0.2.8
Create a notification for this product.
    HUAWEI Columbia-TL00B Affected: earlier than 9.0.0.187(C01E181R1P20T8)
Create a notification for this product.
    HUAWEI E6878-370 Affected: earlier than 10.0.5.1(H610SP10C00)
Create a notification for this product.
    HUAWEI HUAWEI P30 lite Affected: earlier than 10.0.0.185(C605E3R1P3)
Affected: earlier than 10.0.0.197(C432E8R2P7)
Create a notification for this product.
    HUAWEI HUAWEI nova 4e Affected: earlier than 10.0.0.158(C00E64R1P9)
Create a notification for this product.
    HUAWEI Honor 10 Lite Affected: 9.0.1.113(C675E11R1P12)
Create a notification for this product.
    HUAWEI LelandP-L22A Affected: earlier than 9.1.0.166(C675E5R1P4T8)
Create a notification for this product.
    HUAWEI Marie-AL00AX Affected: earlier than 10.0.0.158(C00E64R1P9)
Create a notification for this product.
    HUAWEI Marie-AL00AY Affected: earlier than 10.0.0.158(C00E64R1P9)
Create a notification for this product.
    HUAWEI Marie-AL00BX Affected: earlier than 10.0.0.158(C00E64R1P9)
Create a notification for this product.
    HUAWEI Marie-L03BX Affected: earlier than 10.0.0.188(C605E5R1P1)
Create a notification for this product.
    HUAWEI Marie-L21BX Affected: earlier than 10.0.0.188(C432E4R4P1)
Affected: earlier than 10.0.0.188(C461E5R3P1)
Create a notification for this product.
    HUAWEI Marie-L22BX Affected: earlier than 10.0.0.188(C636E3R3P1)
Create a notification for this product.
    HUAWEI Marie-L23BX Affected: earlier than 10.0.0.188(C605E5R1P1)
Create a notification for this product.
    HUAWEI TC5200-16 Affected: earlier than 10.0.2.8
Create a notification for this product.
    HUAWEI WS5200-11 Affected: earlier than 10.0.2.8
Create a notification for this product.
    HUAWEI WS5200-12 Affected: earlier than 10.0.2.23
Create a notification for this product.
    HUAWEI WS5200-16 Affected: earlier than 10.0.2.8
Create a notification for this product.
    HUAWEI WS5200-17 Affected: earlier than 10.0.2.23
Create a notification for this product.
    HUAWEI WS5800-10 Affected: earlier than 10.0.3.27
Create a notification for this product.
    HUAWEI WS6500-10 Affected: earlier than 10.0.2.8
Create a notification for this product.
    HUAWEI WS6500-16 Affected: earlier than 10.0.2.8
Create a notification for this product.
Show details on NVD website

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T10:19:19.496Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200520-01-leakage-en"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Anne-AL00",
          "vendor": "HUAWEI",
          "versions": [
            {
              "status": "affected",
              "version": "earlier than 9.1.0.331(C675E9R1P3T8)"
            }
          ]
        },
        {
          "product": "Berkeley-L09",
          "vendor": "HUAWEI",
          "versions": [
            {
              "status": "affected",
              "version": "earlier than 10.0.1.1(C675R1)"
            }
          ]
        },
        {
          "product": "CD16-10",
          "vendor": "HUAWEI",
          "versions": [
            {
              "status": "affected",
              "version": "earlier than 10.0.2.8"
            }
          ]
        },
        {
          "product": "CD17-10",
          "vendor": "HUAWEI",
          "versions": [
            {
              "status": "affected",
              "version": "earlier than 10.0.2.8"
            }
          ]
        },
        {
          "product": "CD17-16",
          "vendor": "HUAWEI",
          "versions": [
            {
              "status": "affected",
              "version": "earlier than 10.0.2.8"
            }
          ]
        },
        {
          "product": "CD18-10",
          "vendor": "HUAWEI",
          "versions": [
            {
              "status": "affected",
              "version": "earlier than 10.0.2.8"
            }
          ]
        },
        {
          "product": "CD18-16",
          "vendor": "HUAWEI",
          "versions": [
            {
              "status": "affected",
              "version": "earlier than 10.0.2.8"
            }
          ]
        },
        {
          "product": "Columbia-TL00B",
          "vendor": "HUAWEI",
          "versions": [
            {
              "status": "affected",
              "version": "earlier than 9.0.0.187(C01E181R1P20T8)"
            }
          ]
        },
        {
          "product": "E6878-370",
          "vendor": "HUAWEI",
          "versions": [
            {
              "status": "affected",
              "version": "earlier than 10.0.5.1(H610SP10C00)"
            }
          ]
        },
        {
          "product": "HUAWEI P30 lite",
          "vendor": "HUAWEI",
          "versions": [
            {
              "status": "affected",
              "version": "earlier than 10.0.0.185(C605E3R1P3)"
            },
            {
              "status": "affected",
              "version": "earlier than 10.0.0.197(C432E8R2P7)"
            }
          ]
        },
        {
          "product": "HUAWEI nova 4e",
          "vendor": "HUAWEI",
          "versions": [
            {
              "status": "affected",
              "version": "earlier than 10.0.0.158(C00E64R1P9)"
            }
          ]
        },
        {
          "product": "Honor 10 Lite",
          "vendor": "HUAWEI",
          "versions": [
            {
              "status": "affected",
              "version": "9.0.1.113(C675E11R1P12)"
            }
          ]
        },
        {
          "product": "LelandP-L22A",
          "vendor": "HUAWEI",
          "versions": [
            {
              "status": "affected",
              "version": "earlier than 9.1.0.166(C675E5R1P4T8)"
            }
          ]
        },
        {
          "product": "Marie-AL00AX",
          "vendor": "HUAWEI",
          "versions": [
            {
              "status": "affected",
              "version": "earlier than 10.0.0.158(C00E64R1P9)"
            }
          ]
        },
        {
          "product": "Marie-AL00AY",
          "vendor": "HUAWEI",
          "versions": [
            {
              "status": "affected",
              "version": "earlier than 10.0.0.158(C00E64R1P9)"
            }
          ]
        },
        {
          "product": "Marie-AL00BX",
          "vendor": "HUAWEI",
          "versions": [
            {
              "status": "affected",
              "version": "earlier than 10.0.0.158(C00E64R1P9)"
            }
          ]
        },
        {
          "product": "Marie-L03BX",
          "vendor": "HUAWEI",
          "versions": [
            {
              "status": "affected",
              "version": "earlier than 10.0.0.188(C605E5R1P1)"
            }
          ]
        },
        {
          "product": "Marie-L21BX",
          "vendor": "HUAWEI",
          "versions": [
            {
              "status": "affected",
              "version": "earlier than 10.0.0.188(C432E4R4P1)"
            },
            {
              "status": "affected",
              "version": "earlier than 10.0.0.188(C461E5R3P1)"
            }
          ]
        },
        {
          "product": "Marie-L22BX",
          "vendor": "HUAWEI",
          "versions": [
            {
              "status": "affected",
              "version": "earlier than 10.0.0.188(C636E3R3P1)"
            }
          ]
        },
        {
          "product": "Marie-L23BX",
          "vendor": "HUAWEI",
          "versions": [
            {
              "status": "affected",
              "version": "earlier than 10.0.0.188(C605E5R1P1)"
            }
          ]
        },
        {
          "product": "TC5200-16",
          "vendor": "HUAWEI",
          "versions": [
            {
              "status": "affected",
              "version": "earlier than 10.0.2.8"
            }
          ]
        },
        {
          "product": "WS5200-11",
          "vendor": "HUAWEI",
          "versions": [
            {
              "status": "affected",
              "version": "earlier than 10.0.2.8"
            }
          ]
        },
        {
          "product": "WS5200-12",
          "vendor": "HUAWEI",
          "versions": [
            {
              "status": "affected",
              "version": "earlier than 10.0.2.23"
            }
          ]
        },
        {
          "product": "WS5200-16",
          "vendor": "HUAWEI",
          "versions": [
            {
              "status": "affected",
              "version": "earlier than 10.0.2.8"
            }
          ]
        },
        {
          "product": "WS5200-17",
          "vendor": "HUAWEI",
          "versions": [
            {
              "status": "affected",
              "version": "earlier than 10.0.2.23"
            }
          ]
        },
        {
          "product": "WS5800-10",
          "vendor": "HUAWEI",
          "versions": [
            {
              "status": "affected",
              "version": "earlier than 10.0.3.27"
            }
          ]
        },
        {
          "product": "WS6500-10",
          "vendor": "HUAWEI",
          "versions": [
            {
              "status": "affected",
              "version": "earlier than 10.0.2.8"
            }
          ]
        },
        {
          "product": "WS6500-16",
          "vendor": "HUAWEI",
          "versions": [
            {
              "status": "affected",
              "version": "earlier than 10.0.2.8"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "There is an information leakage vulnerability in some Huawei products. An unauthenticated, adjacent attacker could exploit this vulnerability to decrypt data. Successful exploitation may leak information randomly. Affected product versions include: Anne-AL00 Versions earlier than 9.1.0.331(C675E9R1P3T8); Berkeley-L09 Versions earlier than 10.0.1.1(C675R1); CD16-10 Versions earlier than 10.0.2.8; CD17-10 Versions earlier than 10.0.2.8; CD17-16 Versions earlier than 10.0.2.8; CD18-10 Versions earlier than 10.0.2.8; CD18-16 Versions earlier than 10.0.2.8; Columbia-TL00B Versions earlier than 9.0.0.187(C01E181R1P20T8); E6878-370 Versions earlier than 10.0.5.1(H610SP10C00); HUAWEI P30 lite Versions earlier than 10.0.0.185(C605E3R1P3), Versions earlier than 10.0.0.197(C432E8R2P7); HUAWEI nova 4e Versions earlier than 10.0.0.158(C00E64R1P9); Honor 10 Lite 9.0.1.113(C675E11R1P12); LelandP-L22A Versions earlier than 9.1.0.166(C675E5R1P4T8); Marie-AL00AX Versions earlier than 10.0.0.158(C00E64R1P9); Marie-AL00AY Versions earlier than 10.0.0.158(C00E64R1P9); Marie-AL00BX Versions earlier than 10.0.0.158(C00E64R1P9); Marie-L03BX Versions earlier than 10.0.0.188(C605E5R1P1); Marie-L21BX Versions earlier than 10.0.0.188(C432E4R4P1), Versions earlier than 10.0.0.188(C461E5R3P1); Marie-L22BX Versions earlier than 10.0.0.188(C636E3R3P1); Marie-L23BX Versions earlier than 10.0.0.188(C605E5R1P1); TC5200-16 Versions earlier than 10.0.2.8; WS5200-11 Versions earlier than 10.0.2.8; WS5200-12 Versions earlier than 10.0.2.23; WS5200-16 Versions earlier than 10.0.2.8; WS5200-17 Versions earlier than 10.0.2.23; WS5800-10 Versions earlier than 10.0.3.27; WS6500-10 Versions earlier than 10.0.2.8; WS6500-16 Versions earlier than 10.0.2.8"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Information Leakage",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-05-29T22:23:46",
        "orgId": "25ac1063-e409-4190-8079-24548c77ea2e",
        "shortName": "huawei"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200520-01-leakage-en"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "psirt@huawei.com",
          "ID": "CVE-2020-9069",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Anne-AL00",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "earlier than 9.1.0.331(C675E9R1P3T8)"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Berkeley-L09",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "earlier than 10.0.1.1(C675R1)"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "CD16-10",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "earlier than 10.0.2.8"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "CD17-10",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "earlier than 10.0.2.8"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "CD17-16",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "earlier than 10.0.2.8"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "CD18-10",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "earlier than 10.0.2.8"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "CD18-16",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "earlier than 10.0.2.8"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Columbia-TL00B",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "earlier than 9.0.0.187(C01E181R1P20T8)"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "E6878-370",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "earlier than 10.0.5.1(H610SP10C00)"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "HUAWEI P30 lite",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "earlier than 10.0.0.185(C605E3R1P3)"
                          },
                          {
                            "version_value": "earlier than 10.0.0.197(C432E8R2P7)"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "HUAWEI nova 4e",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "earlier than 10.0.0.158(C00E64R1P9)"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Honor 10 Lite",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "9.0.1.113(C675E11R1P12)"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "LelandP-L22A",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "earlier than 9.1.0.166(C675E5R1P4T8)"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Marie-AL00AX",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "earlier than 10.0.0.158(C00E64R1P9)"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Marie-AL00AY",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "earlier than 10.0.0.158(C00E64R1P9)"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Marie-AL00BX",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "earlier than 10.0.0.158(C00E64R1P9)"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Marie-L03BX",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "earlier than 10.0.0.188(C605E5R1P1)"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Marie-L21BX",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "earlier than 10.0.0.188(C432E4R4P1)"
                          },
                          {
                            "version_value": "earlier than 10.0.0.188(C461E5R3P1)"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Marie-L22BX",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "earlier than 10.0.0.188(C636E3R3P1)"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Marie-L23BX",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "earlier than 10.0.0.188(C605E5R1P1)"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "TC5200-16",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "earlier than 10.0.2.8"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "WS5200-11",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "earlier than 10.0.2.8"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "WS5200-12",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "earlier than 10.0.2.23"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "WS5200-16",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "earlier than 10.0.2.8"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "WS5200-17",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "earlier than 10.0.2.23"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "WS5800-10",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "earlier than 10.0.3.27"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "WS6500-10",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "earlier than 10.0.2.8"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "WS6500-16",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "earlier than 10.0.2.8"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "HUAWEI"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "There is an information leakage vulnerability in some Huawei products. An unauthenticated, adjacent attacker could exploit this vulnerability to decrypt data. Successful exploitation may leak information randomly. Affected product versions include: Anne-AL00 Versions earlier than 9.1.0.331(C675E9R1P3T8); Berkeley-L09 Versions earlier than 10.0.1.1(C675R1); CD16-10 Versions earlier than 10.0.2.8; CD17-10 Versions earlier than 10.0.2.8; CD17-16 Versions earlier than 10.0.2.8; CD18-10 Versions earlier than 10.0.2.8; CD18-16 Versions earlier than 10.0.2.8; Columbia-TL00B Versions earlier than 9.0.0.187(C01E181R1P20T8); E6878-370 Versions earlier than 10.0.5.1(H610SP10C00); HUAWEI P30 lite Versions earlier than 10.0.0.185(C605E3R1P3), Versions earlier than 10.0.0.197(C432E8R2P7); HUAWEI nova 4e Versions earlier than 10.0.0.158(C00E64R1P9); Honor 10 Lite 9.0.1.113(C675E11R1P12); LelandP-L22A Versions earlier than 9.1.0.166(C675E5R1P4T8); Marie-AL00AX Versions earlier than 10.0.0.158(C00E64R1P9); Marie-AL00AY Versions earlier than 10.0.0.158(C00E64R1P9); Marie-AL00BX Versions earlier than 10.0.0.158(C00E64R1P9); Marie-L03BX Versions earlier than 10.0.0.188(C605E5R1P1); Marie-L21BX Versions earlier than 10.0.0.188(C432E4R4P1), Versions earlier than 10.0.0.188(C461E5R3P1); Marie-L22BX Versions earlier than 10.0.0.188(C636E3R3P1); Marie-L23BX Versions earlier than 10.0.0.188(C605E5R1P1); TC5200-16 Versions earlier than 10.0.2.8; WS5200-11 Versions earlier than 10.0.2.8; WS5200-12 Versions earlier than 10.0.2.23; WS5200-16 Versions earlier than 10.0.2.8; WS5200-17 Versions earlier than 10.0.2.23; WS5800-10 Versions earlier than 10.0.3.27; WS6500-10 Versions earlier than 10.0.2.8; WS6500-16 Versions earlier than 10.0.2.8"
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Information Leakage"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200520-01-leakage-en",
              "refsource": "CONFIRM",
              "url": "https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200520-01-leakage-en"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "25ac1063-e409-4190-8079-24548c77ea2e",
    "assignerShortName": "huawei",
    "cveId": "CVE-2020-9069",
    "datePublished": "2020-05-21T14:19:31",
    "dateReserved": "2020-02-18T00:00:00",
    "dateUpdated": "2024-08-04T10:19:19.496Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2020-9069 (GCVE-0-2020-9069)

Vulnerability from cvelistv5 – Published: 2020-05-21 14:19 – Updated: 2024-08-04 10:19
VLAI?
Summary
There is an information leakage vulnerability in some Huawei products. An unauthenticated, adjacent attacker could exploit this vulnerability to decrypt data. Successful exploitation may leak information randomly. Affected product versions include: Anne-AL00 Versions earlier than 9.1.0.331(C675E9R1P3T8); Berkeley-L09 Versions earlier than 10.0.1.1(C675R1); CD16-10 Versions earlier than 10.0.2.8; CD17-10 Versions earlier than 10.0.2.8; CD17-16 Versions earlier than 10.0.2.8; CD18-10 Versions earlier than 10.0.2.8; CD18-16 Versions earlier than 10.0.2.8; Columbia-TL00B Versions earlier than 9.0.0.187(C01E181R1P20T8); E6878-370 Versions earlier than 10.0.5.1(H610SP10C00); HUAWEI P30 lite Versions earlier than 10.0.0.185(C605E3R1P3), Versions earlier than 10.0.0.197(C432E8R2P7); HUAWEI nova 4e Versions earlier than 10.0.0.158(C00E64R1P9); Honor 10 Lite 9.0.1.113(C675E11R1P12); LelandP-L22A Versions earlier than 9.1.0.166(C675E5R1P4T8); Marie-AL00AX Versions earlier than 10.0.0.158(C00E64R1P9); Marie-AL00AY Versions earlier than 10.0.0.158(C00E64R1P9); Marie-AL00BX Versions earlier than 10.0.0.158(C00E64R1P9); Marie-L03BX Versions earlier than 10.0.0.188(C605E5R1P1); Marie-L21BX Versions earlier than 10.0.0.188(C432E4R4P1), Versions earlier than 10.0.0.188(C461E5R3P1); Marie-L22BX Versions earlier than 10.0.0.188(C636E3R3P1); Marie-L23BX Versions earlier than 10.0.0.188(C605E5R1P1); TC5200-16 Versions earlier than 10.0.2.8; WS5200-11 Versions earlier than 10.0.2.8; WS5200-12 Versions earlier than 10.0.2.23; WS5200-16 Versions earlier than 10.0.2.8; WS5200-17 Versions earlier than 10.0.2.23; WS5800-10 Versions earlier than 10.0.3.27; WS6500-10 Versions earlier than 10.0.2.8; WS6500-16 Versions earlier than 10.0.2.8
Severity ?
No CVSS data available.
CWE
  • Information Leakage
Assigner
References
Impacted products
Vendor Product Version
HUAWEI Anne-AL00 Affected: earlier than 9.1.0.331(C675E9R1P3T8)
Create a notification for this product.
    HUAWEI Berkeley-L09 Affected: earlier than 10.0.1.1(C675R1)
Create a notification for this product.
    HUAWEI CD16-10 Affected: earlier than 10.0.2.8
Create a notification for this product.
    HUAWEI CD17-10 Affected: earlier than 10.0.2.8
Create a notification for this product.
    HUAWEI CD17-16 Affected: earlier than 10.0.2.8
Create a notification for this product.
    HUAWEI CD18-10 Affected: earlier than 10.0.2.8
Create a notification for this product.
    HUAWEI CD18-16 Affected: earlier than 10.0.2.8
Create a notification for this product.
    HUAWEI Columbia-TL00B Affected: earlier than 9.0.0.187(C01E181R1P20T8)
Create a notification for this product.
    HUAWEI E6878-370 Affected: earlier than 10.0.5.1(H610SP10C00)
Create a notification for this product.
    HUAWEI HUAWEI P30 lite Affected: earlier than 10.0.0.185(C605E3R1P3)
Affected: earlier than 10.0.0.197(C432E8R2P7)
Create a notification for this product.
    HUAWEI HUAWEI nova 4e Affected: earlier than 10.0.0.158(C00E64R1P9)
Create a notification for this product.
    HUAWEI Honor 10 Lite Affected: 9.0.1.113(C675E11R1P12)
Create a notification for this product.
    HUAWEI LelandP-L22A Affected: earlier than 9.1.0.166(C675E5R1P4T8)
Create a notification for this product.
    HUAWEI Marie-AL00AX Affected: earlier than 10.0.0.158(C00E64R1P9)
Create a notification for this product.
    HUAWEI Marie-AL00AY Affected: earlier than 10.0.0.158(C00E64R1P9)
Create a notification for this product.
    HUAWEI Marie-AL00BX Affected: earlier than 10.0.0.158(C00E64R1P9)
Create a notification for this product.
    HUAWEI Marie-L03BX Affected: earlier than 10.0.0.188(C605E5R1P1)
Create a notification for this product.
    HUAWEI Marie-L21BX Affected: earlier than 10.0.0.188(C432E4R4P1)
Affected: earlier than 10.0.0.188(C461E5R3P1)
Create a notification for this product.
    HUAWEI Marie-L22BX Affected: earlier than 10.0.0.188(C636E3R3P1)
Create a notification for this product.
    HUAWEI Marie-L23BX Affected: earlier than 10.0.0.188(C605E5R1P1)
Create a notification for this product.
    HUAWEI TC5200-16 Affected: earlier than 10.0.2.8
Create a notification for this product.
    HUAWEI WS5200-11 Affected: earlier than 10.0.2.8
Create a notification for this product.
    HUAWEI WS5200-12 Affected: earlier than 10.0.2.23
Create a notification for this product.
    HUAWEI WS5200-16 Affected: earlier than 10.0.2.8
Create a notification for this product.
    HUAWEI WS5200-17 Affected: earlier than 10.0.2.23
Create a notification for this product.
    HUAWEI WS5800-10 Affected: earlier than 10.0.3.27
Create a notification for this product.
    HUAWEI WS6500-10 Affected: earlier than 10.0.2.8
Create a notification for this product.
    HUAWEI WS6500-16 Affected: earlier than 10.0.2.8
Create a notification for this product.
Show details on NVD website

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T10:19:19.496Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200520-01-leakage-en"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Anne-AL00",
          "vendor": "HUAWEI",
          "versions": [
            {
              "status": "affected",
              "version": "earlier than 9.1.0.331(C675E9R1P3T8)"
            }
          ]
        },
        {
          "product": "Berkeley-L09",
          "vendor": "HUAWEI",
          "versions": [
            {
              "status": "affected",
              "version": "earlier than 10.0.1.1(C675R1)"
            }
          ]
        },
        {
          "product": "CD16-10",
          "vendor": "HUAWEI",
          "versions": [
            {
              "status": "affected",
              "version": "earlier than 10.0.2.8"
            }
          ]
        },
        {
          "product": "CD17-10",
          "vendor": "HUAWEI",
          "versions": [
            {
              "status": "affected",
              "version": "earlier than 10.0.2.8"
            }
          ]
        },
        {
          "product": "CD17-16",
          "vendor": "HUAWEI",
          "versions": [
            {
              "status": "affected",
              "version": "earlier than 10.0.2.8"
            }
          ]
        },
        {
          "product": "CD18-10",
          "vendor": "HUAWEI",
          "versions": [
            {
              "status": "affected",
              "version": "earlier than 10.0.2.8"
            }
          ]
        },
        {
          "product": "CD18-16",
          "vendor": "HUAWEI",
          "versions": [
            {
              "status": "affected",
              "version": "earlier than 10.0.2.8"
            }
          ]
        },
        {
          "product": "Columbia-TL00B",
          "vendor": "HUAWEI",
          "versions": [
            {
              "status": "affected",
              "version": "earlier than 9.0.0.187(C01E181R1P20T8)"
            }
          ]
        },
        {
          "product": "E6878-370",
          "vendor": "HUAWEI",
          "versions": [
            {
              "status": "affected",
              "version": "earlier than 10.0.5.1(H610SP10C00)"
            }
          ]
        },
        {
          "product": "HUAWEI P30 lite",
          "vendor": "HUAWEI",
          "versions": [
            {
              "status": "affected",
              "version": "earlier than 10.0.0.185(C605E3R1P3)"
            },
            {
              "status": "affected",
              "version": "earlier than 10.0.0.197(C432E8R2P7)"
            }
          ]
        },
        {
          "product": "HUAWEI nova 4e",
          "vendor": "HUAWEI",
          "versions": [
            {
              "status": "affected",
              "version": "earlier than 10.0.0.158(C00E64R1P9)"
            }
          ]
        },
        {
          "product": "Honor 10 Lite",
          "vendor": "HUAWEI",
          "versions": [
            {
              "status": "affected",
              "version": "9.0.1.113(C675E11R1P12)"
            }
          ]
        },
        {
          "product": "LelandP-L22A",
          "vendor": "HUAWEI",
          "versions": [
            {
              "status": "affected",
              "version": "earlier than 9.1.0.166(C675E5R1P4T8)"
            }
          ]
        },
        {
          "product": "Marie-AL00AX",
          "vendor": "HUAWEI",
          "versions": [
            {
              "status": "affected",
              "version": "earlier than 10.0.0.158(C00E64R1P9)"
            }
          ]
        },
        {
          "product": "Marie-AL00AY",
          "vendor": "HUAWEI",
          "versions": [
            {
              "status": "affected",
              "version": "earlier than 10.0.0.158(C00E64R1P9)"
            }
          ]
        },
        {
          "product": "Marie-AL00BX",
          "vendor": "HUAWEI",
          "versions": [
            {
              "status": "affected",
              "version": "earlier than 10.0.0.158(C00E64R1P9)"
            }
          ]
        },
        {
          "product": "Marie-L03BX",
          "vendor": "HUAWEI",
          "versions": [
            {
              "status": "affected",
              "version": "earlier than 10.0.0.188(C605E5R1P1)"
            }
          ]
        },
        {
          "product": "Marie-L21BX",
          "vendor": "HUAWEI",
          "versions": [
            {
              "status": "affected",
              "version": "earlier than 10.0.0.188(C432E4R4P1)"
            },
            {
              "status": "affected",
              "version": "earlier than 10.0.0.188(C461E5R3P1)"
            }
          ]
        },
        {
          "product": "Marie-L22BX",
          "vendor": "HUAWEI",
          "versions": [
            {
              "status": "affected",
              "version": "earlier than 10.0.0.188(C636E3R3P1)"
            }
          ]
        },
        {
          "product": "Marie-L23BX",
          "vendor": "HUAWEI",
          "versions": [
            {
              "status": "affected",
              "version": "earlier than 10.0.0.188(C605E5R1P1)"
            }
          ]
        },
        {
          "product": "TC5200-16",
          "vendor": "HUAWEI",
          "versions": [
            {
              "status": "affected",
              "version": "earlier than 10.0.2.8"
            }
          ]
        },
        {
          "product": "WS5200-11",
          "vendor": "HUAWEI",
          "versions": [
            {
              "status": "affected",
              "version": "earlier than 10.0.2.8"
            }
          ]
        },
        {
          "product": "WS5200-12",
          "vendor": "HUAWEI",
          "versions": [
            {
              "status": "affected",
              "version": "earlier than 10.0.2.23"
            }
          ]
        },
        {
          "product": "WS5200-16",
          "vendor": "HUAWEI",
          "versions": [
            {
              "status": "affected",
              "version": "earlier than 10.0.2.8"
            }
          ]
        },
        {
          "product": "WS5200-17",
          "vendor": "HUAWEI",
          "versions": [
            {
              "status": "affected",
              "version": "earlier than 10.0.2.23"
            }
          ]
        },
        {
          "product": "WS5800-10",
          "vendor": "HUAWEI",
          "versions": [
            {
              "status": "affected",
              "version": "earlier than 10.0.3.27"
            }
          ]
        },
        {
          "product": "WS6500-10",
          "vendor": "HUAWEI",
          "versions": [
            {
              "status": "affected",
              "version": "earlier than 10.0.2.8"
            }
          ]
        },
        {
          "product": "WS6500-16",
          "vendor": "HUAWEI",
          "versions": [
            {
              "status": "affected",
              "version": "earlier than 10.0.2.8"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "There is an information leakage vulnerability in some Huawei products. An unauthenticated, adjacent attacker could exploit this vulnerability to decrypt data. Successful exploitation may leak information randomly. Affected product versions include: Anne-AL00 Versions earlier than 9.1.0.331(C675E9R1P3T8); Berkeley-L09 Versions earlier than 10.0.1.1(C675R1); CD16-10 Versions earlier than 10.0.2.8; CD17-10 Versions earlier than 10.0.2.8; CD17-16 Versions earlier than 10.0.2.8; CD18-10 Versions earlier than 10.0.2.8; CD18-16 Versions earlier than 10.0.2.8; Columbia-TL00B Versions earlier than 9.0.0.187(C01E181R1P20T8); E6878-370 Versions earlier than 10.0.5.1(H610SP10C00); HUAWEI P30 lite Versions earlier than 10.0.0.185(C605E3R1P3), Versions earlier than 10.0.0.197(C432E8R2P7); HUAWEI nova 4e Versions earlier than 10.0.0.158(C00E64R1P9); Honor 10 Lite 9.0.1.113(C675E11R1P12); LelandP-L22A Versions earlier than 9.1.0.166(C675E5R1P4T8); Marie-AL00AX Versions earlier than 10.0.0.158(C00E64R1P9); Marie-AL00AY Versions earlier than 10.0.0.158(C00E64R1P9); Marie-AL00BX Versions earlier than 10.0.0.158(C00E64R1P9); Marie-L03BX Versions earlier than 10.0.0.188(C605E5R1P1); Marie-L21BX Versions earlier than 10.0.0.188(C432E4R4P1), Versions earlier than 10.0.0.188(C461E5R3P1); Marie-L22BX Versions earlier than 10.0.0.188(C636E3R3P1); Marie-L23BX Versions earlier than 10.0.0.188(C605E5R1P1); TC5200-16 Versions earlier than 10.0.2.8; WS5200-11 Versions earlier than 10.0.2.8; WS5200-12 Versions earlier than 10.0.2.23; WS5200-16 Versions earlier than 10.0.2.8; WS5200-17 Versions earlier than 10.0.2.23; WS5800-10 Versions earlier than 10.0.3.27; WS6500-10 Versions earlier than 10.0.2.8; WS6500-16 Versions earlier than 10.0.2.8"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Information Leakage",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-05-29T22:23:46",
        "orgId": "25ac1063-e409-4190-8079-24548c77ea2e",
        "shortName": "huawei"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200520-01-leakage-en"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "psirt@huawei.com",
          "ID": "CVE-2020-9069",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Anne-AL00",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "earlier than 9.1.0.331(C675E9R1P3T8)"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Berkeley-L09",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "earlier than 10.0.1.1(C675R1)"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "CD16-10",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "earlier than 10.0.2.8"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "CD17-10",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "earlier than 10.0.2.8"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "CD17-16",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "earlier than 10.0.2.8"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "CD18-10",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "earlier than 10.0.2.8"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "CD18-16",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "earlier than 10.0.2.8"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Columbia-TL00B",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "earlier than 9.0.0.187(C01E181R1P20T8)"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "E6878-370",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "earlier than 10.0.5.1(H610SP10C00)"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "HUAWEI P30 lite",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "earlier than 10.0.0.185(C605E3R1P3)"
                          },
                          {
                            "version_value": "earlier than 10.0.0.197(C432E8R2P7)"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "HUAWEI nova 4e",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "earlier than 10.0.0.158(C00E64R1P9)"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Honor 10 Lite",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "9.0.1.113(C675E11R1P12)"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "LelandP-L22A",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "earlier than 9.1.0.166(C675E5R1P4T8)"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Marie-AL00AX",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "earlier than 10.0.0.158(C00E64R1P9)"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Marie-AL00AY",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "earlier than 10.0.0.158(C00E64R1P9)"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Marie-AL00BX",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "earlier than 10.0.0.158(C00E64R1P9)"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Marie-L03BX",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "earlier than 10.0.0.188(C605E5R1P1)"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Marie-L21BX",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "earlier than 10.0.0.188(C432E4R4P1)"
                          },
                          {
                            "version_value": "earlier than 10.0.0.188(C461E5R3P1)"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Marie-L22BX",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "earlier than 10.0.0.188(C636E3R3P1)"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Marie-L23BX",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "earlier than 10.0.0.188(C605E5R1P1)"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "TC5200-16",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "earlier than 10.0.2.8"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "WS5200-11",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "earlier than 10.0.2.8"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "WS5200-12",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "earlier than 10.0.2.23"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "WS5200-16",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "earlier than 10.0.2.8"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "WS5200-17",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "earlier than 10.0.2.23"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "WS5800-10",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "earlier than 10.0.3.27"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "WS6500-10",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "earlier than 10.0.2.8"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "WS6500-16",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "earlier than 10.0.2.8"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "HUAWEI"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "There is an information leakage vulnerability in some Huawei products. An unauthenticated, adjacent attacker could exploit this vulnerability to decrypt data. Successful exploitation may leak information randomly. Affected product versions include: Anne-AL00 Versions earlier than 9.1.0.331(C675E9R1P3T8); Berkeley-L09 Versions earlier than 10.0.1.1(C675R1); CD16-10 Versions earlier than 10.0.2.8; CD17-10 Versions earlier than 10.0.2.8; CD17-16 Versions earlier than 10.0.2.8; CD18-10 Versions earlier than 10.0.2.8; CD18-16 Versions earlier than 10.0.2.8; Columbia-TL00B Versions earlier than 9.0.0.187(C01E181R1P20T8); E6878-370 Versions earlier than 10.0.5.1(H610SP10C00); HUAWEI P30 lite Versions earlier than 10.0.0.185(C605E3R1P3), Versions earlier than 10.0.0.197(C432E8R2P7); HUAWEI nova 4e Versions earlier than 10.0.0.158(C00E64R1P9); Honor 10 Lite 9.0.1.113(C675E11R1P12); LelandP-L22A Versions earlier than 9.1.0.166(C675E5R1P4T8); Marie-AL00AX Versions earlier than 10.0.0.158(C00E64R1P9); Marie-AL00AY Versions earlier than 10.0.0.158(C00E64R1P9); Marie-AL00BX Versions earlier than 10.0.0.158(C00E64R1P9); Marie-L03BX Versions earlier than 10.0.0.188(C605E5R1P1); Marie-L21BX Versions earlier than 10.0.0.188(C432E4R4P1), Versions earlier than 10.0.0.188(C461E5R3P1); Marie-L22BX Versions earlier than 10.0.0.188(C636E3R3P1); Marie-L23BX Versions earlier than 10.0.0.188(C605E5R1P1); TC5200-16 Versions earlier than 10.0.2.8; WS5200-11 Versions earlier than 10.0.2.8; WS5200-12 Versions earlier than 10.0.2.23; WS5200-16 Versions earlier than 10.0.2.8; WS5200-17 Versions earlier than 10.0.2.23; WS5800-10 Versions earlier than 10.0.3.27; WS6500-10 Versions earlier than 10.0.2.8; WS6500-16 Versions earlier than 10.0.2.8"
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Information Leakage"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200520-01-leakage-en",
              "refsource": "CONFIRM",
              "url": "https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200520-01-leakage-en"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "25ac1063-e409-4190-8079-24548c77ea2e",
    "assignerShortName": "huawei",
    "cveId": "CVE-2020-9069",
    "datePublished": "2020-05-21T14:19:31",
    "dateReserved": "2020-02-18T00:00:00",
    "dateUpdated": "2024-08-04T10:19:19.496Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}