Vulnerability · Published May 21, 2020 · Assigned by huawei
CVE-2020-9069
Medium 6.5
In plain English
A medium-severity security flaw in Anne-AL00 from HUAWEI. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 27% of all known vulnerabilities).
Official description
There is an information leakage vulnerability in some Huawei products. An unauthenticated, adjacent attacker could exploit this vulnerability to decrypt data. Successful exploitation may leak information randomly. Affected product versions include: Anne-AL00 Versions earlier than 9.1.0.331(C675E9R1P3T8); Berkeley-L09 Versions earlier than 10.0.1.1(C675R1); CD16-10 Versions earlier than 10.0.2.8; CD17-10 Versions earlier than 10.0.2.8; CD17-16 Versions earlier than 10.0.2.8; CD18-10 Versions earlier than 10.0.2.8; CD18-16 Versions earlier than 10.0.2.8; Columbia-TL00B Versions earlier than 9.0.0.187(C01E181R1P20T8); E6878-370 Versions earlier than 10.0.5.1(H610SP10C00); HUAWEI P30 lite Versions earlier than 10.0.0.185(C605E3R1P3), Versions earlier than 10.0.0.197(C432E8R2P7); HUAWEI nova 4e Versions earlier than 10.0.0.158(C00E64R1P9); Honor 10 Lite 9.0.1.113(C675E11R1P12); LelandP-L22A Versions earlier than 9.1.0.166(C675E5R1P4T8); Marie-AL00AX Versions earlier than 10.0.0.158(C00E64R1P9); Marie-AL00AY Versions earlier than 10.0.0.158(C00E64R1P9); Marie-AL00BX Versions earlier than 10.0.0.158(C00E64R1P9); Marie-L03BX Versions earlier than 10.0.0.188(C605E5R1P1); Marie-L21BX Versions earlier than 10.0.0.188(C432E4R4P1), Versions earlier than 10.0.0.188(C461E5R3P1); Marie-L22BX Versions earlier than 10.0.0.188(C636E3R3P1); Marie-L23BX Versions earlier than 10.0.0.188(C605E5R1P1); TC5200-16 Versions earlier than 10.0.2.8; WS5200-11 Versions earlier than 10.0.2.8; WS5200-12 Versions earlier than 10.0.2.23; WS5200-16 Versions earlier than 10.0.2.8; WS5200-17 Versions earlier than 10.0.2.23; WS5800-10 Versions earlier than 10.0.3.27; WS6500-10 Versions earlier than 10.0.2.8; WS6500-16 Versions earlier than 10.0.2.8
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| HUAWEI | Anne-AL00 | earlier than 9.1.0.331(C675E9R1P3T8) |
| HUAWEI | Berkeley-L09 | earlier than 10.0.1.1(C675R1) |
| HUAWEI | CD16-10 | earlier than 10.0.2.8 |
| HUAWEI | CD17-10 | earlier than 10.0.2.8 |
| HUAWEI | CD17-16 | earlier than 10.0.2.8 |
| HUAWEI | CD18-10 | earlier than 10.0.2.8 |
| HUAWEI | CD18-16 | earlier than 10.0.2.8 |
| HUAWEI | Columbia-TL00B | earlier than 9.0.0.187(C01E181R1P20T8) |
| HUAWEI | E6878-370 | earlier than 10.0.5.1(H610SP10C00) |
| HUAWEI | HUAWEI P30 lite | earlier than 10.0.0.185(C605E3R1P3)earlier than 10.0.0.197(C432E8R2P7) |
| HUAWEI | HUAWEI nova 4e | earlier than 10.0.0.158(C00E64R1P9) |
| HUAWEI | Honor 10 Lite | 9.0.1.113(C675E11R1P12) |
| HUAWEI | LelandP-L22A | earlier than 9.1.0.166(C675E5R1P4T8) |
| HUAWEI | Marie-AL00AX | earlier than 10.0.0.158(C00E64R1P9) |
| HUAWEI | Marie-AL00AY | earlier than 10.0.0.158(C00E64R1P9) |
| HUAWEI | Marie-AL00BX | earlier than 10.0.0.158(C00E64R1P9) |
| HUAWEI | Marie-L03BX | earlier than 10.0.0.188(C605E5R1P1) |
| HUAWEI | Marie-L21BX | earlier than 10.0.0.188(C432E4R4P1)earlier than 10.0.0.188(C461E5R3P1) |
| HUAWEI | Marie-L22BX | earlier than 10.0.0.188(C636E3R3P1) |
| HUAWEI | Marie-L23BX | earlier than 10.0.0.188(C605E5R1P1) |
| HUAWEI | TC5200-16 | earlier than 10.0.2.8 |
| HUAWEI | WS5200-11 | earlier than 10.0.2.8 |
| HUAWEI | WS5200-12 | earlier than 10.0.2.23 |
| HUAWEI | WS5200-16 | earlier than 10.0.2.8 |
| HUAWEI | WS5200-17 | earlier than 10.0.2.23 |
| HUAWEI | WS5800-10 | earlier than 10.0.3.27 |
| HUAWEI | WS6500-10 | earlier than 10.0.2.8 |
| HUAWEI | WS6500-16 | earlier than 10.0.2.8 |