VULNERABILITY INTELLIGENCE

CVE-2020-9085

CVSS score5.3 MEDIUM
EPSS probability0.35%
CISA KEVNot currently listed
Published2024-12-27
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Description

There is a NULL pointer dereference vulnerability in some Huawei products. An attacker may send specially crafted POST messages to the affected products. Due to insufficient validation of some parameter in the message, successful exploit may cause some process abnormal. (Vulnerability ID: HWPSIRT-2017-10105) This vulnerability has been assigned a Common Vulnerabilities and Exposures (CVE) ID: CVE-2020-9085.

Weakness classification

  • psirt@huawei.com: CWE-476
  • nvd@nist.gov: CWE-476

Primary references