CVE-2020-9069: There is an information leakage vulnerability in some Huawei products. An unauthenticated, adjacent attacker could exploit this vulnerability to decrypt data…

PriorityP430medium6.5CVSS 3.1

AVAACLPRNUINSUCHINAN

EPSS

0.34%

25.8th percentile

There is an information leakage vulnerability in some Huawei products. An unauthenticated, adjacent attacker could exploit this vulnerability to decrypt data. Successful exploitation may leak information randomly. Affected product versions include: Anne-AL00 Versions earlier than 9.1.0.331(C675E9R1P3T8); Berkeley-L09 Versions earlier than 10.0.1.1(C675R1); CD16-10 Versions earlier than 10.0.2.8; CD17-10 Versions earlier than 10.0.2.8; CD17-16 Versions earlier than 10.0.2.8; CD18-10 Versions earlier than 10.0.2.8; CD18-16 Versions earlier than 10.0.2.8; Columbia-TL00B Versions earlier than 9.0.0.187(C01E181R1P20T8); E6878-370 Versions earlier than 10.0.5.1(H610SP10C00); HUAWEI P30 lite Versions earlier than 10.0.0.185(C605E3R1P3), Versions earlier than 10.0.0.197(C432E8R2P7); HUAWEI nova 4e Versions earlier than 10.0.0.158(C00E64R1P9); Honor 10 Lite 9.0.1.113(C675E11R1P12); LelandP-L22A Versions earlier than 9.1.0.166(C675E5R1P4T8); Marie-AL00AX Versions earlier than 10.0.0.158(C00E64R1P9); Marie-AL00AY Versions earlier than 10.0.0.158(C00E64R1P9); Marie-AL00BX Versions earlier than 10.0.0.158(C00E64R1P9); Marie-L03BX Versions earlier than 10.0.0.188(C605E5R1P1); Marie-L21BX Versions earlier than 10.0.0.188(C432E4R4P1), Versions earlier than 10.0.0.188(C461E5R3P1); Marie-L22BX Versions earlier than 10.0.0.188(C636E3R3P1); Marie-L23BX Versions earlier than 10.0.0.188(C605E5R1P1); TC5200-16 Versions earlier than 10.0.2.8; WS5200-11 Versions earlier than 10.0.2.8; WS5200-12 Versions earlier than 10.0.2.23; WS5200-16 Versions earlier than 10.0.2.8; WS5200-17 Versions earlier than 10.0.2.23; WS5800-10 Versions earlier than 10.0.3.27; WS6500-10 Versions earlier than 10.0.2.8; WS6500-16 Versions earlier than 10.0.2.8

Affected

49 ranges· showing 25

Vendor	Product	Version range	Fixed in
huawei	anne-al00	—	—
huawei	anne-al00_firmware	< 9.1.0.331\(c675e9r1p3t8\)	9.1.0.331\(c675e9r1p3t8\)
huawei	berkeley-l09	—	—
huawei	berkeley-l09_firmware	< 10.0.1.1\(c675r1\)	10.0.1.1\(c675r1\)
huawei	cd16-10	—	—
huawei	cd16-10_firmware	< 10.0.2.8	10.0.2.8
huawei	cd17-10	—	—
huawei	cd17-10_firmware	< 10.0.2.8	10.0.2.8
huawei	cd17-16	—	—
huawei	cd17-16_firmware	< 10.0.2.8	10.0.2.8
huawei	cd18-10	—	—
huawei	cd18-10_firmware	< 10.0.2.8	10.0.2.8
huawei	cd18-16	—	—
huawei	cd18-16_firmware	< 10.0.2.8	10.0.2.8
huawei	columbia-tl00b	—	—
huawei	columbia-tl00b_firmware	< 9.0.0.187\(c01e181r1p20t8\)	9.0.0.187\(c01e181r1p20t8\)
huawei	e6878-370	—	—
huawei	e6878-370_firmware	< 10.0.5.1\(h610sp10c00\)	10.0.5.1\(h610sp10c00\)
huawei	honor_10_lite	—	—
huawei	honor_10_lite_firmware	< 10.0.0.182\(c675e17r2p2\)	10.0.0.182\(c675e17r2p2\)
huawei	huawei_nova_4e	—	—
huawei	huawei_p30_lite	—	—
huawei	huawei_p30_lite	—	—
huawei	lelandp-l22a	—	—
huawei	lelandp-l22a_firmware	< 9.1.0.166\(c675e5r1p4t8\)	9.1.0.166\(c675e5r1p4t8\)

CVSS provenance

nvdv3.16.5MEDIUMCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

nvdv2.03.3LOWAV:A/AC:L/Au:N/C:P/I:N/A:N

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.