by Kastro
Paper/Archive/CVE-2020-9068

CVE-2020-9068

Huawei AR3200 — Huawei AR3200 products with versions of V200R007C00SPC900, V200R007C00SPCa00, V200R007C00SPCb00, V200R007C00SPCc00, V200R009C00SPC500 hav…

EPSS 1%CVSS 9.8
critical.is priorityof 100
43
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 65.8.658 × 2013.2No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

Huawei AR3200 products with versions of V200R007C00SPC900, V200R007C00SPCa00, V200R007C00SPCb00, V200R007C00SPCc00, V200R009C00SPC500 have an improper authentication vulnerability. Attackers need to perform some operations to exploit the vulnerability. Successful exploit may obtain certain permissions on the device.

Affected

ProductAffectedFixed inSource
AR3200V200R007C00SPC900–CNA
AR3200V200R007C00SPCa00–CNA
AR3200V200R007C00SPCb00–CNA
AR3200V200R007C00SPCc00–CNA
AR3200V200R009C00SPC500–CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

refhuawei.com/en/psirt/security-advisories/huawei-sa-20200422-01-authentication-en