What is CVE-2020-9241?

CVE-2020-9241 is a high-severity vulnerability in Huawei E6878-370. CVSS score: 7.0/10. Published 2020-08-17.

How severe is CVE-2020-9241?

High severity. CVSS v3 base score is 7.0 out of 10.

Vulnerability in Huawei E6878-370

CVE-2020-9241

Huawei 5G Mobile WiFi E6878-370 with versions of 10.0.3.1(H563SP1C00),10.0.3.1(H563SP21C233) have an improper authorization vulnerability. The device does not restrict certain data received from WAN port. Successful exploit could allow an attacker at WAN side to manage certain service of the device.

EPSS: 0.005 (38.0th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.0 (High). Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H.

Affected products

Huawei E6878-370
Huawei E6878-370_firmware — versions 10.0.3.1\(h563sp1c00\), 10.0.3.1\(h563sp21c233\)
N/a E6878-370 — versions 10.0.3.1(H563SP1C00),10.0.3.1(H563SP21C233)

References

psirt@huawei.com (x_refsource_MISC, Vendor Advisory)

Frequently asked questions

What is CVE-2020-9241?: CVE-2020-9241 is a high-severity vulnerability in Huawei E6878-370. CVSS score: 7.0/10. Published 2020-08-17.
How severe is CVE-2020-9241?: High severity. CVSS v3 base score is 7.0 out of 10.