Vulnerability in Huawei Anne-al00
CVE-2020-9069
There is an information leakage vulnerability in some Huawei products. An unauthenticated, adjacent attacker could exploit this vulnerability to decrypt data. Successful exploitation may leak information randomly. Affected product versions…
EPSS: 0.003 (25.3th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 6.5 (Medium). Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N.
Affected products
- Huawei Anne-al00 — versions earlier than 9.1.0.331(C675E9R1P3T8)
- Huawei Anne-al00_firmware
- Huawei Berkeley-l09 — versions earlier than 10.0.1.1(C675R1)
- Huawei Berkeley-l09_firmware
- Huawei Cd16-10 — versions earlier than 10.0.2.8
- Huawei Cd16-10_firmware
- Huawei Cd17-10 — versions earlier than 10.0.2.8
- Huawei Cd17-10_firmware
- Huawei Cd17-16 — versions earlier than 10.0.2.8
- Huawei Cd17-16_firmware
References
- psirt@huawei.com (x_refsource_CONFIRM, Vendor Advisory)
Frequently asked questions
- What is CVE-2020-9069?
- CVE-2020-9069 is a medium-severity vulnerability in Huawei Anne-al00. CVSS score: 6.5/10. Published 2020-05-21.
- How severe is CVE-2020-9069?
- Medium severity. CVSS v3 base score is 6.5 out of 10.