CVE-2020-9085

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2020-9085
There is a NULL pointer dereference vulnerability in some Huawei products. An attacker may send specially crafted POST messages to the affected products. Due to insufficient validation of some parameter in the message, successful exploit may cause some process abnormal. (Vulnerability ID: HWPSIRT-2017-10105) This vulnerability has been assigned a Common Vulnerabilities and Exposures (CVE) ID: CVE-2020-9085.

5.3 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact LOW

Scope UNCHANGED

References
Link Resource
https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200826-01-pointer_en Vendor Advisory
Configurations

Configuration 1 (hide)

AND
OR cpe:2.3:o:huawei:b612_firmware:b612s-25dtcpu-v100r001b192d03sp00c234:*:*:*:*:*:*:*
cpe:2.3:o:huawei:b612_firmware:b612s-25dtcpu-v100r001b192d03sp00c287:*:*:*:*:*:*:*
cpe:2.3:o:huawei:b612_firmware:b612s-25dtcpu-v100r001b192d05sp00c00:*:*:*:*:*:*:*
cpe:2.3:h:huawei:b612:-:*:*:*:*:*:*:*
History

13 Jan 2025, 19:35

Type Values Removed Values Added
CPE cpe:2.3:o:huawei:b612_firmware:b612s-25dtcpu-v100r001b192d03sp00c287:*:*:*:*:*:*:*
cpe:2.3:o:huawei:b612_firmware:b612s-25dtcpu-v100r001b192d05sp00c00:*:*:*:*:*:*:*
cpe:2.3:o:huawei:b612_firmware:b612s-25dtcpu-v100r001b192d03sp00c234:*:*:*:*:*:*:*
cpe:2.3:h:huawei:b612:-:*:*:*:*:*:*:*
References () https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200826-01-pointer_en - () https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200826-01-pointer_en - Vendor Advisory
First Time Huawei b612 Firmware
Huawei
Huawei b612
Summary
  • (es) Existe una vulnerabilidad de desreferencia de puntero NULL en algunos productos Huawei. Un atacante puede enviar mensajes POST especialmente manipulados a los productos afectados. Debido a la validación insuficiente de algún parámetro en el mensaje, una explotación exitosa puede provocar que algún proceso sea anormal. (Identificador de vulnerabilidad: HWPSIRT-2017-10105) A esta vulnerabilidad se le ha asignado un identificador de vulnerabilidades y exposiciones comunes (CVE): CVE-2020-9085.

27 Dec 2024, 10:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-12-27 10:15

Updated : 2025-01-13 19:35

NVD link : CVE-2020-9085

Mitre link : CVE-2020-9085

CVE.ORG link : CVE-2020-9085

JSON object : View

Products Affected

huawei

  • b612
  • b612_firmware
CWE
CWE-476

NULL Pointer Dereference