Vulnerability · Published Apr 2, 2020 · Assigned by huawei
CVE-2020-9067
High 8.0
In plain English
A high-severity security flaw in SmartAX EA5800. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.6% (higher than 50% of all known vulnerabilities).
Official description
There is a buffer overflow vulnerability in some Huawei products. The vulnerability can be exploited by an attacker to perform remote code execution on the affected products when the affected product functions as an optical line terminal (OLT). Affected product versions include:SmartAX MA5600T versions V800R013C10, V800R015C00, V800R015C10, V800R017C00, V800R017C10, V800R018C00, V800R018C10; SmartAX MA5800 versions V100R017C00, V100R017C10, V100R018C00, V100R018C10, V100R019C10; SmartAX EA5800 versions V100R018C00, V100R018C10, V100R019C10.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| n/a | SmartAX MA5600T | V800R013C10V800R015C00V800R015C10V800R017C00V800R017C10V800R018C00V800R018C10 |
| n/a | SmartAX MA5800 | V100R017C00V100R017C10V100R018C00V100R018C10V100R019C10 |
| n/a | SmartAX EA5800 | V100R018C00V100R018C10V100R019C10 |