PT-2020-20524 · Huawei · Imanager Neteco 6000+1

Published 2020-12-29 · Updated 2021-07-21 · CVE-2020-9208

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions iManager NetEco 6000 version V600R021C00

Description The issue is related to an information leak due to a lack of authentication in a module. Attackers without access to the module can exploit this to obtain extra information.

Recommendations For iManager NetEco 6000 version V600R021C00, consider restricting access to the vulnerable module to minimize the risk of exploitation until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Missing Authentication

Weakness Enumeration

CWE-306

Related Identifiers

CVE-2020-9208

Affected Products

Huawei Vrp

Imanager Neteco 6000

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2020-9208 · Security Note
• https://osv.dev/vulnerability/CVE-2020-9208 · Vendor Advisory
• https://huawei.com/en/psirt/security-advisories/huawei-sa-20201216-01-neteco-en · Vendor Advisory
• https://t.me/cvenotify/7904 · Telegram Post
• https://t.me/cvenotify/7963 · Telegram Post
• https://t.me/cvenotify/7915 · Telegram Post