CVE-2020-9069

VendorhuaweiProductanne-al00 firmware, honor 10 lite firmware, cd16-10 firmware, cd17-10 firmware, cd18-10 firmware, ws5200-11 firmware, ws6500-10 firmware, berkeley-l09 firmware, e6878-370 firmware, cd17-16 firmware, cd18-16 firmware, columbia-tl00b firmware, lelandp-l22a firmware, tc5200-16 firmware, ws5200-16 firmware, ws5200-17 firmware, ws5800-10 firmware, ws6500-16 firmwareDiscoveredMay 21, 2020UpdatedNov 21, 2024

There is an information leakage vulnerability in some Huawei products. An unauthenticated, adjacent attacker could exploit this vulnerability to decrypt data. Successful exploitation may leak information randomly. Affected product versions include: Anne-AL00 Versions earlier than 9.1.0.331(C675E9R1P3T8); Berkeley-L09 Versions earlier than 10.0.1.1(C675R1); CD16-10 Versions earlier than 10.0.2.8; CD17-10 Versions earlier than 10.0.2.8; CD17-16 Versions earlier than 10.0.2.8; CD18-10 Versions earlier than 10.0.2.8; CD18-16 Versions earlier than 10.0.2.8; Columbia-TL00B Versions earlier than 9.0.0.187(C01E181R1P20T8); E6878-370 Versions earlier than 10.0.5.1(H610SP10C00); HUAWEI P30 lite Versions earlier than 10.0.0.185(C605E3R1P3), Versions earlier than 10.0.0.197(C432E8R2P7); HUAWEI nova…

View graph Watch Export

CVSS v3.1

6.5 MEDIUM

EPSS

0.34%

probability of exploitation in 30 days

CISA KEV

Not listed

no confirmed exploitation reported

News coverage

sources referencing this CVE

Related IOCs

seen in the same coverage

EPSS Trend

Aug 16, 2026 → Aug 18, 2026

● 0.00pp

0.34% → 0.34% over 2 tracked changes

CVSS v3.1 Detail

Attack VectorADJACENT

Attack ComplexityLOW

Privileges RequiredNONE

User InteractionNONE

ScopeUNCHANGED

ConfidentialityHIGH

IntegrityNONE

AvailabilityNONE

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Connections

18 relationships