CVE-2020-9247: Buffer Overflow
There is a buffer overflow vulnerability in several Huawei products. The system does not sufficiently validate certain configuration parameter which is passed from user that would cause buffer overflow. The attacker should trick the user into installing and running a malicious application with a high privilege, successful exploit may cause code execution. Affected product include Huawei HONOR 20 PRO, Mate 20, Mate 20 Pro, Mate 20 X, P30, P30 Pro, Hima-L29C, Laya-AL00EP, Princeton-AL10B, Tony-AL00B, Yale-L61A, Yale-TL00B and YaleP-AL10B.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2020-9247?
CVE-2020-9247 has a critical severity rating due to the potential for exploitation leading to remote code execution.
How do I fix CVE-2020-9247?
To fix CVE-2020-9247, users should update affected Huawei devices to the latest firmware version provided by Huawei.
Which Huawei products are affected by CVE-2020-9247?
CVE-2020-9247 affects multiple Huawei products including the Honor 20 Pro, Mate 20, Mate 20 Pro, P30, and several others.
What causes the CVE-2020-9247 vulnerability?
CVE-2020-9247 is caused by insufficient validation of configuration parameters leading to a buffer overflow.
Can CVE-2020-9247 be exploited remotely?
Yes, CVE-2020-9247 can be exploited remotely if an attacker successfully tricks a user into installing a malicious application.