CVE-2020-9086

There is a buffer error vulnerability in some Huawei product. An unauthenticated attacker may send special UPNP message to the affected products. Due to insufficient input validation of some value, successful exploit may cause some service abnormal. (Vulnerability ID: HWPSIRT-2017-08234) This vulnerability has been assigned a Common Vulnerabilities and Exposures (CVE) ID: CVE-2020-9086.

• CWE-124
• CWE-787

• https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200826-01-buffer_enVendor Advisory

Published

Dec 27, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-9080There is an improper privilege management vulnerability in H…7.8
• CVE-2020-9081There is an improper authorization vulnerability in some Hua…6.8
• CVE-2020-9082There is an information disclosure vulnerability in several …4.6
• CVE-2020-9083HUAWEI Mate 20 smart phones with Versions earlier than 10.1.…2.4
• CVE-2020-9084Taurus-AN00B versions earlier than 10.1.0.156(C00E155R7P2) h…6.5
• CVE-2020-9085There is a NULL pointer dereference vulnerability in some Hu…5.3
• CVE-2020-9087Taurus-AL00A version 10.0.0.1(C00E1R1P1) has an out-of-bound…5.5
• CVE-2020-9089There is an information vulnerability in Huawei smartphones.…3.3
• CVE-2020-9090FusionAccess version 6.5.1 has an improper authorization vul…7.8
• CVE-2020-9091Taurus-AN00B versions earlier than 10.1.0.156(C00E155R7P2) h…5.5
• CVE-2020-9092HUAWEI Mate 20 versions earlier than 10.1.0.163(C00E160R3P8)…4.6
• CVE-2020-9093There is a use after free vulnerability in Taurus-AL00A vers…5.5