CVE-2020-9102: Low severity huawei cloudengine 12800 vulnerability
There is a information leak vulnerability in some Huawei products, and it could allow a local attacker to get information. The vulnerability is due to the improper management of the username. An attacker with the ability to access the device and cause the username information leak. Affected product versions include: CloudEngine 12800 versions V200R002C50SPC800, V200R003C00SPC810, V200R005C00SPC800, V200R005C10SPC800, V200R019C00SPC800; CloudEngine 5800 versions V200R002C50SPC800, V200R003C00SPC810, V200R005C00SPC800, V200R005C10SPC800, V200R019C00SPC800; CloudEngine 6800 versions V200R002C50SPC800, V200R003C00SPC810, V200R005C00SPC800, V200R005C10SPC800, V200R005C20SPC800, V200R019C00SPC800; CloudEngine 7800 versions V200R002C50SPC800, V200R003C00SPC810, V200R005C00SPC800, V200R005C10SPC800, V200R019C00SPC800
Affected Software
Event History
Frequently Asked Questions
What is CVE-2020-9102?
CVE-2020-9102 is an information leak vulnerability in some Huawei products.
How does CVE-2020-9102 impact Huawei products?
CVE-2020-9102 allows a local attacker to obtain information by exploiting improper management of the username in Huawei products.
Which Huawei products are affected by CVE-2020-9102?
Huawei Cloudengine 12800, 5800, 6800, and 7800 firmware versions v200r002c50spc800, v200r003c00spc810, v200r005c00spc800, v200r005c10spc800, v200r005c20spc800, and v200r019c00spc800 are affected by CVE-2020-9102.
What is the severity of CVE-2020-9102?
CVE-2020-9102 has a severity rating of low, with a CVSS score of 3.3.
How can I fix CVE-2020-9102?
To fix CVE-2020-9102, it is recommended to apply the relevant security patches provided by Huawei.