First published: Fri Dec 27 2024(Updated: )
There is an insufficient integrity vulnerability in Huawei products. A module does not perform sufficient integrity check in a specific scenario. Attackers can exploit the vulnerability by physically install malware. This could compromise normal service of the affected device. (Vulnerability ID: HWPSIRT-2020-00145) This vulnerability has been assigned a Common Vulnerabilities and Exposures (CVE) ID: CVE-2020-9210.
Credit: psirt@huawei.com
Affected Software | Affected Version | How to fix |
---|---|---|
All of | ||
Huawei Myna | =9.0.1.11\(h100sp8c00\) | |
Huawei Myna |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2020-9210 is classified as a high severity vulnerability due to its potential impact on device integrity.
To mitigate CVE-2020-9210, ensure that you apply the latest firmware updates from Huawei for the affected devices.
CVE-2020-9210 affects Huawei Myna firmware version 9.0.1.11 (h100sp8c00), among other Huawei products.
An attacker could physically install malware to compromise the normal operation of devices affected by CVE-2020-9210.
Currently, there are no known workarounds for CVE-2020-9210 other than applying the necessary firmware updates.