CVE-2020-9241
Last modified
CVE-2020-9241 is a high-severity vulnerability rated 7/10 on the CVSS scale. Huawei 5G Mobile WiFi E6878-370 with versions of 10.0.3.1(H563SP1C00),10.0.3.1(H563SP21C233) have an improper authorization vulnerability. The device does not restrict certain data received from WAN port. EPSS estimates a 0.47% chance of exploitation in the next 30 days.
Description
Huawei 5G Mobile WiFi E6878-370 with versions of 10.0.3.1(H563SP1C00),10.0.3.1(H563SP21C233) have an improper authorization vulnerability. The device does not restrict certain data received from WAN port. Successful exploit could allow an attacker at WAN side to manage certain service of the device.
Metrics
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Huawei | E6878-370 Firmware | 10.0.3.1\(h563sp1c00\) |
| Huawei | E6878-370 Firmware | 10.0.3.1\(h563sp21c233\) |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2020-9241?
How severe is CVE-2020-9241?
How do I fix CVE-2020-9241?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2020
- CVE-2020-9235Huawei smartphones HONOR 20 PRO Versions earlier than 10.1.0…5.5
- CVE-2020-9236There is an improper interface design vulnerability in Huawe…8.8
- CVE-2020-9237Huawei smartphone Taurus-AL00B with versions earlier than 10…6.7
- CVE-2020-9238Taurus-AN00B versions earlier than 10.1.0.156(C00E155R7P2) h…6.5
- CVE-2020-9239Huawei smartphones BLA-A09 versions 8.0.0.123(C212),versions…5.5
- CVE-2020-9240Taurus-AN00B versions earlier than 10.1.0.156(C00E155R7P2) h…5.5
- CVE-2020-9242FusionCompute 8.0.0 have a command injection vulnerability. …8.8
- CVE-2020-9243HUAWEI Mate 30 with versions earlier than 10.1.0.150(C00E136…5.5
- CVE-2020-9244HUAWEI Mate 20 versions Versions earlier than 10.1.0.160(C00…6.8
- CVE-2020-9245HUAWEI P30 versions Versions earlier than 10.1.0.160(C00E160…5.5
- CVE-2020-9246FusionCompute 8.0.0 has an information leak vulnerability. A…6.5
- CVE-2020-9247There is a buffer overflow vulnerability in several Huawei p…7.8
Are you affected by CVE-2020-9241?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST
