PT-2020-20470 · Huawei · Columbia-Tl00B+25

Published 2020-05-21 · Updated 2021-07-21 · CVE-2020-9069

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Anne-AL00 versions earlier than 9.1.0.331(C675E9R1P3T8) Berkeley-L09 versions earlier than 10.0.1.1(C675R1) CD16-10 versions earlier than 10.0.2.8 CD17-10 versions earlier than 10.0.2.8 CD17-16 versions earlier than 10.0.2.8 CD18-10 versions earlier than 10.0.2.8 CD18-16 versions earlier than 10.0.2.8 Columbia-TL00B versions earlier than 9.0.0.187(C01E181R1P20T8) E6878-370 versions earlier than 10.0.5.1(H610SP10C00) HUAWEI P30 lite versions earlier than 10.0.0.185(C605E3R1P3) HUAWEI P30 lite versions earlier than 10.0.0.197(C432E8R2P7) HUAWEI nova 4e versions earlier than 10.0.0.158(C00E64R1P9) Honor 10 Lite versions earlier than 9.0.1.113(C675E11R1P12) Honor 10 Lite versions earlier than 10.0.0.182(C675E17R2P2) LelandP-L22A versions earlier than 9.1.0.166(C675E5R1P4T8) Marie-AL00AX versions earlier than 10.0.0.158(C00E64R1P9) Marie-AL00AY versions earlier than 10.0.0.158(C00E64R1P9) Marie-AL00BX versions earlier than 10.0.0.158(C00E64R1P9) Marie-L03BX versions earlier than 10.0.0.188(C605E5R1P1) Marie-L21BX versions earlier than 10.0.0.188(C432E4R4P1) Marie-L21BX versions earlier than 10.0.0.188(C461E5R3P1) Marie-L22BX versions earlier than 10.0.0.188(C636E3R3P1) Marie-L23BX versions earlier than 10.0.0.188(C605E5R1P1) TC5200-16 versions earlier than 10.0.2.8 WS5200-11 versions earlier than 10.0.2.8 WS5200-12 versions earlier than 10.0.2.23 WS5200-16 versions earlier than 10.0.2.8 WS5200-17 versions earlier than 10.0.2.23 WS5800-10 versions earlier than 10.0.3.27 WS6500-10 versions earlier than 10.0.2.8 WS6500-16 versions earlier than 10.0.2.8

Description There is an information leakage vulnerability in some Huawei products. An unauthenticated, adjacent attacker could exploit this vulnerability to decrypt data. Successful exploitation may leak information randomly.

Recommendations For Anne-AL00 versions earlier than 9.1.0.331(C675E9R1P3T8), update to version 9.1.0.331(C675E9R1P3T8) or later. For Berkeley-L09 versions earlier than 10.0.1.1(C675R1), update to version 10.0.1.1(C675R1) or later. For CD16-10 versions earlier than 10.0.2.8, update to version 10.0.2.8 or later. For CD17-10 versions earlier than 10.0.2.8, update to version 10.0.2.8 or later. For CD17-16 versions earlier than 10.0.2.8, update to version 10.0.2.8 or later. For CD18-10 versions earlier than 10.0.2.8, update to version 10.0.2.8 or later. For CD18-16 versions earlier than 10.0.2.8, update to version 10.0.2.8 or later. For Columbia-TL00B versions earlier than 9.0.0.187(C01E181R1P20T8), update to version 9.0.0.187(C01E181R1P20T8) or later. For E6878-370 versions earlier than 10.0.5.1(H610SP10C00), update to version 10.0.5.1(H610SP10C00) or later. For HUAWEI P30 lite versions earlier than 10.0.0.185(C605E3R1P3), update to version 10.0.0.185(C605E3R1P3) or later. For HUAWEI P30 lite versions earlier than 10.0.0.197(C432E8R2P7), update to version 10.0.0.197(C432E8R2P7) or later. For HUAWEI nova 4e versions earlier than 10.0.0.158(C00E64R1P9), update to version 10.0.0.158(C00E64R1P9) or later. For Honor 10 Lite versions earlier than 9.0.1.113(C675E11R1P12), update to version 9.0.1.113(C675E11R1P12) or later. For Honor 10 Lite versions earlier than 10.0.0.182(C675E17R2P2), update to version 10.0.0.182(C675E17R2P2) or later. For LelandP-L22A versions earlier than 9.1.0.166(C675E5R1P4T8), update to version 9.1.0.166(C675E5R1P4T8) or later. For Marie-AL00AX versions earlier than 10.0.0.158(C00E64R1P9), update to version 10.0.0.158(C00E64R1P9) or later. For Marie-AL00AY versions earlier than 10.0.0.158(C00E64R1P9), update to version 10.0.0.158(C00E64R1P9) or later. For Marie-AL00BX versions earlier than 10.0.0.158(C00E64R1P9), update to version 10.0.0.158(C00E64R1P9) or later. For Marie-L03BX versions earlier than 10.0.0.188(C605E5R1P1), update to version 10.0.0.188(C605E5R1P1) or later. For Marie-L21BX versions earlier than 10.0.0.188(C432E4R4P1), update to version 10.0.0.188(C432E4R4P1) or later. For Marie-L21BX versions earlier than 10.0.0.188(C461E5R3P1), update to version 10.0.0.188(C461E5R3P1) or later. For Marie-L22BX versions earlier than 10.0.0.188(C636E3R3P1), update to version 10.0.0.188(C636E3R3P1) or later. For Marie-L23BX versions earlier than 10.0.0.188(C605E5R1P1), update to version 10.0.0.188(C605E5R1P1) or later. For TC5200-16 versions earlier than 10.0.2.8, update to version 10.0.2.8 or later. For WS5200-11 versions earlier than 10.0.2.8, update to version 10.0.2.8 or later. For WS5200-12 versions earlier than 10.0.2.23, update to version 10.0.2.23 or later. For WS5200-16 versions earlier than 10.0.2.8, update to version 10.0.2.8 or later. For WS5200-17 versions earlier than 10.0.2.23, update to version 10.0.2.23 or later. For WS5800-10 versions earlier than 10.0.3.27, update to version 10.0.3.27 or later. For WS6500-10 versions earlier than 10.0.2.8, update to version 10.0.2.8 or later. For WS6500-16 versions earlier than 10.0.2.8, update to version 10.0.2.8 or later.

Fix

Related Identifiers

CVE-2020-9069

Affected Products

Anne-Al00

Berkeley-L09

Cd16-10

Cd17-10

Cd17-16

Cd18-10

Cd18-16

Columbia-Tl00B

E6878-370

Huawei P30 Lite

Huawei Nova 4

Honor 10 Lite

Lelandp-L22A

Marie-Al00Ax

Marie-L03Bx

Marie-L21Bx

Marie-L22Bx

Marie-L23Bx

Tc5200-16

Ws5200-11

Ws5200-12

Ws5200-16

Ws5200-17

Ws5800-10

Ws6500-10

Ws6500-16

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2020-9069 · Security Note
• https://huawei.com/en/psirt/security-advisories/huawei-sa-20200520-01-leakage-en · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-9069 · Vendor Advisory
• https://t.me/cvenotify/3978 · Telegram Post