What is CVE-2020-9210?

CVE-2020-9210 is a medium-severity vulnerability in Huawei Myna, classified under Improper Validation of Integrity Check Value. CVSS score: 6.8/10. Published 2024-12-27.

How severe is CVE-2020-9210?

Medium severity. CVSS v3 base score is 6.8 out of 10.

Is CVE-2020-9210 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Vulnerability in Huawei Myna

CVE-2020-9210

There is an insufficient integrity vulnerability in Huawei products. A module does not perform sufficient integrity check in a specific scenario. Attackers can exploit the vulnerability by physically install malware. This could compromise normal service of the affected device. (Vulnerability ID: HWPSIRT-2020-00145) This vulnerability has been assigned a Common Vulnerabilities and Exposures (CVE) ID: CVE-2020-9210.

EPSS: 0.001 (4.6th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.8 (Medium). Vector: CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.

Affected products

Huawei Myna — versions 9.0.1.11(H100SP8C00)
Huawei Myna_firmware — versions 9.0.1.11\(h100sp8c00\)

Weakness classification (CWE)

CWE-354 — Improper Validation of Integrity Check Value

Public proof-of-concept exploits

fkie-cad/nvd-json-data-feeds

References

psirt@huawei.com (Vendor Advisory)

Frequently asked questions

What is CVE-2020-9210?: CVE-2020-9210 is a medium-severity vulnerability in Huawei Myna, classified under Improper Validation of Integrity Check Value. CVSS score: 6.8/10. Published 2024-12-27.
How severe is CVE-2020-9210?: Medium severity. CVSS v3 base score is 6.8 out of 10.
Is CVE-2020-9210 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.