CVE-2020-9086

MEDIUM

4.3

Description

There is a buffer error vulnerability in some Huawei product. An unauthenticated attacker may send special UPNP message to the affected products. Due to insufficient input validation of some value, successful exploit may cause some service abnormal. (Vulnerability ID: HWPSIRT-2017-08234) This vulnerability has been assigned a Common Vulnerabilities and Exposures (CVE) ID: CVE-2020-9086.

CVE Details

CVSS v3.1 Score4.3

SeverityMEDIUM

CVSS VectorCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Attack VectorADJACENT_NETWORK

ComplexityLOW

Privileges RequiredNONE

User InteractionNONE

Published12/27/2024

Last Modified1/13/2025

Sourcenvd

Honeypot Sightings0

Affected Products

huawei:b612huawei:b612_firmware

Weaknesses (CWE)

CWE-124CWE-787

References

https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200826-01-buffer_en(psirt@huawei.com)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.