CVE-2020-9102
Summary
| CVE | CVE-2020-9102 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2020-07-17 23:15:00 UTC |
| Updated | 2021-07-21 11:39:00 UTC |
| Description | There is a information leak vulnerability in some Huawei products, and it could allow a local attacker to get information. The vulnerability is due to the improper management of the username. An attacker with the ability to access the device and cause the username information leak. Affected product versions include: CloudEngine 12800 versions V200R002C50SPC800, V200R003C00SPC810, V200R005C00SPC800, V200R005C10SPC800, V200R019C00SPC800; CloudEngine 5800 versions V200R002C50SPC800, V200R003C00SPC810, V200R005C00SPC800, V200R005C10SPC800, V200R019C00SPC800; CloudEngine 6800 versions V200R002C50SPC800, V200R003C00SPC810, V200R005C00SPC800, V200R005C10SPC800, V200R005C20SPC800, V200R019C00SPC800; CloudEngine 7800 versions V200R002C50SPC800, V200R003C00SPC810, V200R005C00SPC800, V200R005C10SPC800, V200R019C00SPC800 |
Risk And Classification
Problem Types: NVD-CWE-noinfo
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Hardware | Huawei | Cloudengine 12800 | - | All | All | All |
| Hardware | Huawei | Cloudengine 12800 | - | All | All | All |
| Operating System | Huawei | Cloudengine 12800 Firmware | v200r002c50spc800 | All | All | All |
| Operating System | Huawei | Cloudengine 12800 Firmware | v200r003c00spc810 | All | All | All |
| Operating System | Huawei | Cloudengine 12800 Firmware | v200r005c00spc800 | All | All | All |
| Operating System | Huawei | Cloudengine 12800 Firmware | v200r005c10spc800 | All | All | All |
| Operating System | Huawei | Cloudengine 12800 Firmware | v200r019c00spc800 | All | All | All |
| Operating System | Huawei | Cloudengine 12800 Firmware | v200r002c50spc800 | All | All | All |
| Operating System | Huawei | Cloudengine 12800 Firmware | v200r003c00spc810 | All | All | All |
| Operating System | Huawei | Cloudengine 12800 Firmware | v200r005c00spc800 | All | All | All |
| Operating System | Huawei | Cloudengine 12800 Firmware | v200r005c10spc800 | All | All | All |
| Operating System | Huawei | Cloudengine 12800 Firmware | v200r019c00spc800 | All | All | All |
| Hardware | Huawei | Cloudengine 5800 | - | All | All | All |
| Hardware | Huawei | Cloudengine 5800 | - | All | All | All |
| Operating System | Huawei | Cloudengine 5800 Firmware | v200r002c50spc800 | All | All | All |
| Operating System | Huawei | Cloudengine 5800 Firmware | v200r003c00spc810 | All | All | All |
| Operating System | Huawei | Cloudengine 5800 Firmware | v200r005c00spc800 | All | All | All |
| Operating System | Huawei | Cloudengine 5800 Firmware | v200r005c10spc800 | All | All | All |
| Operating System | Huawei | Cloudengine 5800 Firmware | v200r019c00spc800 | All | All | All |
| Operating System | Huawei | Cloudengine 5800 Firmware | v200r002c50spc800 | All | All | All |
| Operating System | Huawei | Cloudengine 5800 Firmware | v200r003c00spc810 | All | All | All |
| Operating System | Huawei | Cloudengine 5800 Firmware | v200r005c00spc800 | All | All | All |
| Operating System | Huawei | Cloudengine 5800 Firmware | v200r005c10spc800 | All | All | All |
| Operating System | Huawei | Cloudengine 5800 Firmware | v200r019c00spc800 | All | All | All |
| Hardware | Huawei | Cloudengine 6800 | - | All | All | All |
| Hardware | Huawei | Cloudengine 6800 | - | All | All | All |
| Operating System | Huawei | Cloudengine 6800 Firmware | v200r002c50spc800 | All | All | All |
| Operating System | Huawei | Cloudengine 6800 Firmware | v200r003c00spc810 | All | All | All |
| Operating System | Huawei | Cloudengine 6800 Firmware | v200r005c00spc800 | All | All | All |
| Operating System | Huawei | Cloudengine 6800 Firmware | v200r005c10spc800 | All | All | All |
| Operating System | Huawei | Cloudengine 6800 Firmware | v200r005c20spc800 | All | All | All |
| Operating System | Huawei | Cloudengine 6800 Firmware | v200r019c00spc800 | All | All | All |
| Operating System | Huawei | Cloudengine 6800 Firmware | v200r002c50spc800 | All | All | All |
| Operating System | Huawei | Cloudengine 6800 Firmware | v200r003c00spc810 | All | All | All |
| Operating System | Huawei | Cloudengine 6800 Firmware | v200r005c00spc800 | All | All | All |
| Operating System | Huawei | Cloudengine 6800 Firmware | v200r005c10spc800 | All | All | All |
| Operating System | Huawei | Cloudengine 6800 Firmware | v200r005c20spc800 | All | All | All |
| Operating System | Huawei | Cloudengine 6800 Firmware | v200r019c00spc800 | All | All | All |
| Hardware | Huawei | Cloudengine 7800 | - | All | All | All |
| Hardware | Huawei | Cloudengine 7800 | - | All | All | All |
| Operating System | Huawei | Cloudengine 7800 Firmware | v200r002c50spc800 | All | All | All |
| Operating System | Huawei | Cloudengine 7800 Firmware | v200r003c00spc810 | All | All | All |
| Operating System | Huawei | Cloudengine 7800 Firmware | v200r005c00spc800 | All | All | All |
| Operating System | Huawei | Cloudengine 7800 Firmware | v200r005c10spc800 | All | All | All |
| Operating System | Huawei | Cloudengine 7800 Firmware | v200r019c00spc800 | All | All | All |
| Operating System | Huawei | Cloudengine 7800 Firmware | v200r002c50spc800 | All | All | All |
| Operating System | Huawei | Cloudengine 7800 Firmware | v200r003c00spc810 | All | All | All |
| Operating System | Huawei | Cloudengine 7800 Firmware | v200r005c00spc800 | All | All | All |
| Operating System | Huawei | Cloudengine 7800 Firmware | v200r005c10spc800 | All | All | All |
| Operating System | Huawei | Cloudengine 7800 Firmware | v200r019c00spc800 | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Security Advisory - Information Disclosure Vulnerability on some Huawei Products | CONFIRM | www.huawei.com | Vendor Advisory |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.