Skip to content
CVE PROGRAM SOURCE RECORD5.3 Medium

CVE-2020-9085

There is a NULL pointer dereference vulnerability in some Huawei products. An attacker may send specially crafted POST messages to the affected products. Due to insufficient valida

Description

There is a NULL pointer dereference vulnerability in some Huawei products. An attacker may send specially crafted POST messages to the affected products. Due to insufficient validation of some parameter in the message, successful exploit may cause some process abnormal. (Vulnerability ID: HWPSIRT-2017-10105) This vulnerability has been assigned a Common Vulnerabilities and Exposures (CVE) ID: CVE-2020-9085.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Huawei HUAWEI 4G Router B612

Default version status: unaffected

  • B612s-25dTCPU-V100R001B192D03SP00C234affected
  • B612s-25dTCPU-V100R001B192D03SP00C287affected
  • B612s-25dTCPU-V100R001B192D05SP00C00affected

References