MEDIUM🇵🇱 Wersja polska

CVE-2020-9122

CVSS 6.5v3.1pub. 2020-10-12upd. 2024-11-21

Some Huawei products have an insufficient input verification vulnerability. Attackers can exploit this vulnerability in the LAN to cause service abnormal on affected devices.Affected product versions include:HiRouter-CD30-10 version 10.0.2.5;HiRouter-CT31-10 version 10.0.2.20;WS5200-12 version 10.0.1.9;WS5281-10 version 10.0.5.10;WS5800-10 version 10.0.3.25;WS7100-10 version 10.0.5.21;WS7200-10 version 10.0.5.21.

CVSS Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

  • Huawei Hirouter Cd30 10

    HW
    Huawei
    all versions

  • Huawei Hirouter Cd30 10 Firmware

    OS
    Huawei
    10.0.2.5 – 10.0.5.7 (excl.)

  • Huawei Hirouter Ct31 10

    HW
    Huawei
    all versions

  • Huawei Hirouter Ct31 10 Firmware

    OS
    Huawei
    10.0.2.20 – 10.0.2.37 (excl.)

  • Huawei Ws5200 12

    HW
    Huawei
    all versions

  • Huawei Ws5200 12 Firmware

    OS
    Huawei
    10.0.1.9 – 10.0.5.6

  • Huawei Ws5281 10

    HW
    Huawei
    all versions

  • Huawei Ws5281 10 Firmware

    OS
    Huawei
    10.0.5.10 – 10.0.5.32 (excl.)

  • Huawei Ws5800 10

    HW
    Huawei
    all versions

  • Huawei Ws5800 10 Firmware

    OS
    Huawei
    10.0.3.25 – 10.0.3.33 (excl.)

  • Huawei Ws7100 10

    HW
    Huawei
    all versions

  • Huawei Ws7100 10 Firmware

    OS
    Huawei
    10.0.5.21 – 10.0.5.37 (excl.)

  • Huawei Ws7200 10

    HW
    Huawei
    all versions

  • Huawei Ws7200 10 Firmware

    OS
    Huawei
    10.0.5.21 – 10.0.5.37 (excl.)
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2023-7266HIGH7.5same product

Some Huawei home routers have a connection hijacking vulnerability. Successful exploitation of this vulnerabil...

CVE-2019-5269HIGH7.8same product

Some Huawei home routers have an improper authorization vulnerability. Due to improper authorization of certai...

CVE-2019-5268HIGH8.1same product

Some Huawei home routers have an input validation vulnerability. Due to input parameter is not correctly verif...

CVE-2022-33735MEDIUM6.5same product

There is a password verification vulnerability in WS7200-10 11.0.2.13. Attackers on the LAN may use brute forc...

CVE-2021-46835MEDIUM4.3same product

There is a traffic hijacking vulnerability in WS7200-10 11.0.2.13. Successful exploitation of this vulnerabili...