CVE-2020-9102
Last modified
CVE-2020-9102 is a low-severity vulnerability rated 3.3/10 on the CVSS scale. There is a information leak vulnerability in some Huawei products, and it could allow a local attacker to get information. The vulnerability is due to the improper management of the username. EPSS estimates a 0.20% chance of exploitation in the next 30 days.
Description
There is a information leak vulnerability in some Huawei products, and it could allow a local attacker to get information. The vulnerability is due to the improper management of the username. An attacker with the ability to access the device and cause the username information leak. Affected product versions include: CloudEngine 12800 versions V200R002C50SPC800, V200R003C00SPC810, V200R005C00SPC800, V200R005C10SPC800, V200R019C00SPC800; CloudEngine 5800 versions V200R002C50SPC800, V200R003C00SPC810, V200R005C00SPC800, V200R005C10SPC800, V200R019C00SPC800; CloudEngine 6800 versions V200R002C50SPC800, V200R003C00SPC810, V200R005C00SPC800, V200R005C10SPC800, V200R005C20SPC800, V200R019C00SPC800; CloudEngine 7800 versions V200R002C50SPC800, V200R003C00SPC810, V200R005C00SPC800, V200R005C10SPC800, V200R019C00SPC800
Metrics
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Huawei | Cloudengine 12800 Firmware | v200r002c50spc800 |
| Huawei | Cloudengine 12800 Firmware | v200r003c00spc810 |
| Huawei | Cloudengine 12800 Firmware | v200r005c00spc800 |
| Huawei | Cloudengine 12800 Firmware | v200r005c10spc800 |
| Huawei | Cloudengine 12800 Firmware | v200r019c00spc800 |
| Huawei | Cloudengine 5800 Firmware | v200r002c50spc800 |
| Huawei | Cloudengine 5800 Firmware | v200r003c00spc810 |
| Huawei | Cloudengine 5800 Firmware | v200r005c00spc800 |
| Huawei | Cloudengine 5800 Firmware | v200r005c10spc800 |
| Huawei | Cloudengine 5800 Firmware | v200r019c00spc800 |
| Huawei | Cloudengine 6800 Firmware | v200r002c50spc800 |
| Huawei | Cloudengine 6800 Firmware | v200r003c00spc810 |
| Huawei | Cloudengine 6800 Firmware | v200r005c00spc800 |
| Huawei | Cloudengine 6800 Firmware | v200r005c10spc800 |
| Huawei | Cloudengine 6800 Firmware | v200r005c20spc800 |
| Huawei | Cloudengine 6800 Firmware | v200r019c00spc800 |
| Huawei | Cloudengine 7800 Firmware | v200r002c50spc800 |
| Huawei | Cloudengine 7800 Firmware | v200r003c00spc810 |
| Huawei | Cloudengine 7800 Firmware | v200r005c00spc800 |
| Huawei | Cloudengine 7800 Firmware | v200r005c10spc800 |
| Huawei | Cloudengine 7800 Firmware | v200r019c00spc800 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2020-9102?
How severe is CVE-2020-9102?
How do I fix CVE-2020-9102?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2020
- CVE-2020-9095HUAWEI P30 Pro smartphone with Versions earlier than 10.1.0.…5.5
- CVE-2020-9096HUAWEI P30 Pro smartphones with Versions earlier than 10.1.0…5.5
- CVE-2020-9098Huawei OceanStor 5310 product with version of V500R007C60SPC…7.5
- CVE-2020-9099Huawei products IPS Module; NGFW Module; NIP6300; NIP6600; N…9.8
- CVE-2020-9100Earlier than HiSuite 10.1.0.500 have a DLL hijacking vulnera…7.8
- CVE-2020-9101There is an out-of-bounds write vulnerability in some produc…6.5
- CVE-2020-9103HUAWEI Mate 20 smartphones with 9.0.0.205(C00E205R2P1) have …4.6
- CVE-2020-9104HUAWEI P30 smartphones with Versions earlier than 10.1.0.123…4.3
- CVE-2020-9105Taurus-AN00B versions earlier than 10.1.0.156(C00E155R7P2) h…6.7
- CVE-2020-9106HUAWEI P30 Pro versions earlier than 10.1.0.160(C00E160R2P8)…4.6
- CVE-2020-9107HUAWEI P30 Pro versions earlier than 10.1.0.160(C00E160R2P8)…5.5
- CVE-2020-9108HUAWEI P30 Pro versions earlier than 10.1.0.160(C00E160R2P8)…5.5
Are you affected by CVE-2020-9102?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST
