Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2020-9067

There is a buffer overflow vulnerability in some Huawei products. The vulnerability can be exploited by an attacker to perform remote code execution on the affected products when the affected product functions as an optical line terminal (OLT). Affected product versions include:SmartAX MA5600T versions V800R013C10, V800R015C00, V800R015C10, V800R017C00, V800R017C10, V800R018C00, V800R018C10; SmartAX MA5800 versions V100R017C00, V100R017C10, V100R018C00, V100R018C10, V100R019C10; SmartAX EA5800 versions V100R018C00, V100R018C10, V100R019C10.

Published

2020-04-02T21:15:13.927

Last Modified

2024-11-21T05:39:57.667

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 8.0 (HIGH)

CVSSv2 Vector

AV:A/AC:L/Au:S/C:P/I:P/A:P

  • Access Vector: ADJACENT_NETWORK
  • Access Complexity: LOW
  • Authentication: SINGLE
  • Confidentiality Impact: PARTIAL
  • Integrity Impact: PARTIAL
  • Availability Impact: PARTIAL
Exploitability Score

5.1

Impact Score

6.4

Weaknesses
  • Type: Primary
    CWE-120
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System huawei smartax_ma5600t_firmware v800r013c10 Yes
Operating System huawei smartax_ma5600t_firmware v800r015c00 Yes
Operating System huawei smartax_ma5600t_firmware v800r015c10 Yes
Operating System huawei smartax_ma5600t_firmware v800r017c00 Yes
Operating System huawei smartax_ma5600t_firmware v800r017c10 Yes
Operating System huawei smartax_ma5600t_firmware v800r018c00 Yes
Operating System huawei smartax_ma5600t_firmware v800r018c10 Yes
Hardware huawei smartax_ma5600t - No
Operating System huawei smartax_ma5800_firmware v100r017c00 Yes
Operating System huawei smartax_ma5800_firmware v100r017c10 Yes
Operating System huawei smartax_ma5800_firmware v100r018c00 Yes
Operating System huawei smartax_ma5800_firmware v100r018c10 Yes
Operating System huawei smartax_ma5800_firmware v100r019c10 Yes
Hardware huawei smartax_ma5800 - No
Operating System huawei smartax_ea5800_firmware v100r018c00 Yes
Operating System huawei smartax_ea5800_firmware v100r018c10 Yes
Operating System huawei smartax_ea5800_firmware v100r019c10 Yes
Hardware huawei smartax_ea5800 - No
References