CVE-2020-9241

published 2020-08-17

CVE-2020-9241: Huawei 5G Mobile WiFi E6878-370 with versions of 10.0.3.1(H563SP1C00),10.0.3.1(H563SP21C233) have an improper authorization vulnerability. The device does not…

Priority P3 37 high 7 CVSS 3.1

AV N AC H PR N UI N S U C L I L A H

Huawei 5G Mobile WiFi E6878-370 with versions of 10.0.3.1(H563SP1C00),10.0.3.1(H563SP21C233) have an improper authorization vulnerability. The device does not restrict certain data received from WAN port. Successful exploit could allow an attacker at WAN side to manage certain service of the device.

Affected

3 ranges

Vendor	Product	Version range	Fixed in
huawei	e6878-370_firmware	—	—
huawei	e6878-370_firmware	—	—
huawei	e6878-370_firmware	—	—

CVSS provenance

nvd v3.1 7.0 HIGH CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H

nvd v2.0 6.8 MEDIUM AV:N/AC:M/Au:N/C:P/I:P/A:P

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-863