cbcvebase.
CVE-2020-9247
published 2020-12-07

CVE-2020-9247: There is a buffer overflow vulnerability in several Huawei products. The system does not sufficiently validate certain configuration parameter which is passed…

PriorityP338high7.8CVSS 3.1
AVLACLPRNUIRSUCHIHAH
EPSS
0.79%
52.1th percentile
There is a buffer overflow vulnerability in several Huawei products. The system does not sufficiently validate certain configuration parameter which is passed from user that would cause buffer overflow. The attacker should trick the user into installing and running a malicious application with a high privilege, successful exploit may cause code execution. Affected product include Huawei HONOR 20 PRO, Mate 20, Mate 20 Pro, Mate 20 X, P30, P30 Pro, Hima-L29C, Laya-AL00EP, Princeton-AL10B, Tony-AL00B, Yale-L61A, Yale-TL00B and YaleP-AL10B.

Affected

56 ranges· showing 25
VendorProductVersion rangeFixed in
huaweihima-l29c>= unspecified < 10.1.0.273(C185E5R2P4)10.1.0.273(C185E5R2P4)
huaweihima-l29c>= unspecified < 10.1.0.273(C636E5R2P4)10.1.0.273(C636E5R2P4)
huaweihima-l29c>= unspecified < 10.1.0.275(C10E4R2P4)10.1.0.275(C10E4R2P4)
huaweihima-l29c_firmware< 10.1.0.273\(c185e5r2p4\)10.1.0.273\(c185e5r2p4\)
huaweihima-l29c_firmware< 10.1.0.273\(c636e5r2p4\)10.1.0.273\(c636e5r2p4\)
huaweihima-l29c_firmware< 10.1.0.275\(c10e4r2p4\)10.1.0.275\(c10e4r2p4\)
huaweihonor_20_pro>= unspecified < 10.1.0.230(C432E9R5P1)10.1.0.230(C432E9R5P1)
huaweihonor_20_pro>= unspecified < 10.1.0.231(C10E3R3P2)10.1.0.231(C10E3R3P2)
huaweihonor_20_pro_firmware< 10.1.0.230\(c432e9r5p1\)10.1.0.230\(c432e9r5p1\)
huaweihonor_20_pro_firmware< 10.1.0.231\(c10e3r3p2\)10.1.0.231\(c10e3r3p2\)
huaweihuawei_mate_20>= unspecified < 10.1.0.160(C00E160R3P8)10.1.0.160(C00E160R3P8)
huaweihuawei_mate_20_pro>= unspecified < 10.1.0.270(C432E7R1P5)10.1.0.270(C432E7R1P5)
huaweihuawei_mate_20_pro>= unspecified < 10.1.0.270(C635E3R1P5)10.1.0.270(C635E3R1P5)
huaweihuawei_mate_20_pro>= unspecified < 10.1.0.273(C185E7R2P4)10.1.0.273(C185E7R2P4)
huaweihuawei_mate_20_pro>= unspecified < 10.1.0.273(C636E7R2P4)10.1.0.273(C636E7R2P4)
huaweihuawei_mate_20_pro>= unspecified < 10.1.0.277(C10E7R2P4)10.1.0.277(C10E7R2P4)
huaweihuawei_mate_20_pro>= unspecified < 10.1.0.277(C605E7R1P5)10.1.0.277(C605E7R1P5)
huaweihuawei_mate_20_x>= unspecified < 10.1.0.160(C00E160R2P8)10.1.0.160(C00E160R2P8)
huaweihuawei_p30——
huaweihuawei_p30>= unspecified < 10.1.0.123(C432E22R2P5)10.1.0.123(C432E22R2P5)
huaweihuawei_p30>= unspecified < 10.1.0.126(C10E7R5P1)10.1.0.126(C10E7R5P1)
huaweihuawei_p30>= unspecified < 10.1.0.126(C185E4R7P1)10.1.0.126(C185E4R7P1)
huaweihuawei_p30>= unspecified < 10.1.0.126(C605E19R1P3)10.1.0.126(C605E19R1P3)
huaweihuawei_p30>= unspecified < 10.1.0.126(C636E5R3P4)10.1.0.126(C636E5R3P4)
huaweihuawei_p30>= unspecified < 10.1.0.126(C636E7R3P4)10.1.0.126(C636E7R3P4)

CVSS provenance

nvdv3.17.8HIGHCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
nvdv2.06.8MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:P
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.