Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

CVE-2020-9069

Quick assessment

Affected
HUAWEI Anne-AL00
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Huawei Anne-AL00等都是中国华为(Huawei)公司的产品。Huawei Anne-AL00是一款智能手机。Honor 10 Lite是一款智能手机。Huawei TC5200-16是一款无线路由器。 多款Huawei产品中存在信息泄露漏洞。攻击者可利用该漏洞解密数据,导致随机性的信息泄露。以下产品及版本受到影响:Huawei Anne-AL00 9.1.0.331(C675E9R1P3T8) 之前版本;Berkeley-L09 10.0.1.1(C675R1)之前版本;CD16-10 10

AI Predicted 5.5 Difficulty: Moderate EPSS 0.34% · P27

Possible ATT&CK Techniques 1 AI

T1213 · Data from Information Repositories
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2020-9069

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
There is an information leakage vulnerability in some Huawei products. An unauthenticated, adjacent attacker could exploit this vulnerability to decrypt data. Successful exploitation may leak information randomly. Affected product versions include: Anne-AL00 Versions earlier than 9.1.0.331(C675E9R1P3T8); Berkeley-L09 Versions earlier than 10.0.1.1(C675R1); CD16-10 Versions earlier than 10.0.2.8; CD17-10 Versions earlier than 10.0.2.8; CD17-16 Versions earlier than 10.0.2.8; CD18-10 Versions earlier than 10.0.2.8; CD18-16 Versions earlier than 10.0.2.8; Columbia-TL00B Versions earlier than 9.0.0.187(C01E181R1P20T8); E6878-370 Versions earlier than 10.0.5.1(H610SP10C00); HUAWEI P30 lite Versions earlier than 10.0.0.185(C605E3R1P3), Versions earlier than 10.0.0.197(C432E8R2P7); HUAWEI nova 4e Versions earlier than 10.0.0.158(C00E64R1P9); Honor 10 Lite 9.0.1.113(C675E11R1P12); LelandP-L22A Versions earlier than 9.1.0.166(C675E5R1P4T8); Marie-AL00AX Versions earlier than 10.0.0.158(C00E64R1P9); Marie-AL00AY Versions earlier than 10.0.0.158(C00E64R1P9); Marie-AL00BX Versions earlier than 10.0.0.158(C00E64R1P9); Marie-L03BX Versions earlier than 10.0.0.188(C605E5R1P1); Marie-L21BX Versions earlier than 10.0.0.188(C432E4R4P1), Versions earlier than 10.0.0.188(C461E5R3P1); Marie-L22BX Versions earlier than 10.0.0.188(C636E3R3P1); Marie-L23BX Versions earlier than 10.0.0.188(C605E5R1P1); TC5200-16 Versions earlier than 10.0.2.8; WS5200-11 Versions earlier than 10.0.2.8; WS5200-12 Versions earlier than 10.0.2.23; WS5200-16 Versions earlier than 10.0.2.8; WS5200-17 Versions earlier than 10.0.2.23; WS5800-10 Versions earlier than 10.0.3.27; WS6500-10 Versions earlier than 10.0.2.8; WS6500-16 Versions earlier than 10.0.2.8
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
多款Huawei产品信息泄露漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Huawei Anne-AL00等都是中国华为(Huawei)公司的产品。Huawei Anne-AL00是一款智能手机。Honor 10 Lite是一款智能手机。Huawei TC5200-16是一款无线路由器。 多款Huawei产品中存在信息泄露漏洞。攻击者可利用该漏洞解密数据,导致随机性的信息泄露。以下产品及版本受到影响:Huawei Anne-AL00 9.1.0.331(C675E9R1P3T8) 之前版本;Berkeley-L09 10.0.1.1(C675R1)之前版本;CD16-10 10
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
HUAWEI Anne-AL00 earlier than 9.1.0.331(C675E9R1P3T8) -
HUAWEI Berkeley-L09 earlier than 10.0.1.1(C675R1) -
HUAWEI CD16-10 earlier than 10.0.2.8 -
HUAWEI CD17-10 earlier than 10.0.2.8 -
HUAWEI CD17-16 earlier than 10.0.2.8 -
HUAWEI CD18-10 earlier than 10.0.2.8 -
HUAWEI CD18-16 earlier than 10.0.2.8 -
HUAWEI Columbia-TL00B earlier than 9.0.0.187(C01E181R1P20T8) -
HUAWEI E6878-370 earlier than 10.0.5.1(H610SP10C00) -
HUAWEI HUAWEI P30 lite earlier than 10.0.0.185(C605E3R1P3) -
HUAWEI HUAWEI nova 4e earlier than 10.0.0.158(C00E64R1P9) -
HUAWEI Honor 10 Lite 9.0.1.113(C675E11R1P12) -
HUAWEI LelandP-L22A earlier than 9.1.0.166(C675E5R1P4T8) -
HUAWEI Marie-AL00AX earlier than 10.0.0.158(C00E64R1P9) -
HUAWEI Marie-AL00AY earlier than 10.0.0.158(C00E64R1P9) -
HUAWEI Marie-AL00BX earlier than 10.0.0.158(C00E64R1P9) -
HUAWEI Marie-L03BX earlier than 10.0.0.188(C605E5R1P1) -
HUAWEI Marie-L21BX earlier than 10.0.0.188(C432E4R4P1) -
HUAWEI Marie-L22BX earlier than 10.0.0.188(C636E3R3P1) -
HUAWEI Marie-L23BX earlier than 10.0.0.188(C605E5R1P1) -
HUAWEI TC5200-16 earlier than 10.0.2.8 -
HUAWEI WS5200-11 earlier than 10.0.2.8 -
HUAWEI WS5200-12 earlier than 10.0.2.23 -
HUAWEI WS5200-16 earlier than 10.0.2.8 -
HUAWEI WS5200-17 earlier than 10.0.2.23 -
HUAWEI WS5800-10 earlier than 10.0.3.27 -
HUAWEI WS6500-10 earlier than 10.0.2.8 -
HUAWEI WS6500-16 earlier than 10.0.2.8 -

II. Public POCs for CVE-2020-9069

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2020-9069

登录查看更多情报信息。

Other References for CVE-2020-9069 (1)

IV. Related Vulnerabilities

V. Comments for CVE-2020-9069

No comments yet


Leave a comment