Heimdall Security Logo

CVE-2020-9069

Vulnérabilité non évaluée dans Anne-AL00 (HUAWEI)

CVSS 0.0 · Non évaluée
EPSS 0.3%
HUAWEI•Anne-AL00•Versions : earlier than 10.0.0.188(C432E4R4P1), earlier than 10.0.2.8, 9.0.1.113(C675E11R1P12), earlier than 10.0.0.188(C461E5R3P1), earlier than 10.0.0.188(C605E5R1P1), earlier than 10.0.2.23, earlier than 10.0.0.185(C605E3R1P3), earlier than 9.0.0.187(C01E181R1P20T8), earlier than 10.0.5.1(H610SP10C00), earlier than 10.0.1.1(C675R1), earlier than 10.0.0.188(C636E3R3P1), earlier than 10.0.0.158(C00E64R1P9), earlier than 10.0.0.197(C432E8R2P7), earlier than 9.1.0.331(C675E9R1P3T8), earlier than 9.1.0.166(C675E5R1P4T8), earlier than 10.0.3.27

Description

There is an information leakage vulnerability in some Huawei products. An unauthenticated, adjacent attacker could exploit this vulnerability to decrypt data. Successful exploitation may leak information randomly. Affected product versions include: Anne-AL00 Versions earlier than 9.1.0.331(C675E9R1P3T8); Berkeley-L09 Versions earlier than 10.0.1.1(C675R1); CD16-10 Versions earlier than 10.0.2.8; CD17-10 Versions earlier than 10.0.2.8; CD17-16 Versions earlier than 10.0.2.8; CD18-10 Versions earlier than 10.0.2.8; CD18-16 Versions earlier than 10.0.2.8; Columbia-TL00B Versions earlier than 9.0.0.187(C01E181R1P20T8); E6878-370 Versions earlier than 10.0.5.1(H610SP10C00); HUAWEI P30 lite Versions earlier than 10.0.0.185(C605E3R1P3), Versions earlier than 10.0.0.197(C432E8R2P7); HUAWEI nova 4e Versions earlier than 10.0.0.158(C00E64R1P9); Honor 10 Lite 9.0.1.113(C675E11R1P12); LelandP-L22A Versions earlier than 9.1.0.166(C675E5R1P4T8); Marie-AL00AX Versions earlier than 10.0.0.158(C00E64R1P9); Marie-AL00AY Versions earlier than 10.0.0.158(C00E64R1P9); Marie-AL00BX Versions earlier than 10.0.0.158(C00E64R1P9); Marie-L03BX Versions earlier than 10.0.0.188(C605E5R1P1); Marie-L21BX Versions earlier than 10.0.0.188(C432E4R4P1), Versions earlier than 10.0.0.188(C461E5R3P1); Marie-L22BX Versions earlier than 10.0.0.188(C636E3R3P1); Marie-L23BX Versions earlier than 10.0.0.188(C605E5R1P1); TC5200-16 Versions earlier than 10.0.2.8; WS5200-11 Versions earlier than 10.0.2.8; WS5200-12 Versions earlier than 10.0.2.23; WS5200-16 Versions earlier than 10.0.2.8; WS5200-17 Versions earlier than 10.0.2.23; WS5800-10 Versions earlier than 10.0.3.27; WS6500-10 Versions earlier than 10.0.2.8; WS6500-16 Versions earlier than 10.0.2.8

Gravité et risque d'exploitation

CVE-2020-9069 obtient un score CVSS de 0.0/10, soit une gravité non évaluée. Selon le modèle EPSS, la probabilité qu'elle soit exploitée dans les 30 prochains jours est de 0.34 %, ce qui la place devant 25.4 % des CVE référencées.

Que faire ?

  • Vérifiez si Anne-AL00 (versions earlier than 10.0.0.188(C432E4R4P1), earlier than 10.0.2.8, 9.0.1.113(C675E11R1P12), earlier than 10.0.0.188(C461E5R3P1), earlier than 10.0.0.188(C605E5R1P1), earlier than 10.0.2.23, earlier than 10.0.0.185(C605E3R1P3), earlier than 9.0.0.187(C01E181R1P20T8), earlier than 10.0.5.1(H610SP10C00), earlier than 10.0.1.1(C675R1), earlier than 10.0.0.188(C636E3R3P1), earlier than 10.0.0.158(C00E64R1P9), earlier than 10.0.0.197(C432E8R2P7), earlier than 9.1.0.331(C675E9R1P3T8), earlier than 9.1.0.166(C675E5R1P4T8), earlier than 10.0.3.27) est présent sur votre parc.
  • Appliquez le correctif ou la version corrigée indiqués dans les références de l'éditeur.
  • À défaut de correctif, limitez l'exposition (filtrage réseau, désactivation du composant).
  • Automatisez la détection : les agents CVE Heimdall (gratuits, open source) corrèlent l'inventaire de vos serveurs avec la base CVE.

Références

Rechercher une autre CVE