VULNERABILITY INTELLIGENCE

CVE-2020-9086

CVSS score4.3 MEDIUM
EPSS probability0.21%
CISA KEVNot currently listed
Published2024-12-27
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Description

There is a buffer error vulnerability in some Huawei product. An unauthenticated attacker may send special UPNP message to the affected products. Due to insufficient input validation of some value, successful exploit may cause some service abnormal. (Vulnerability ID: HWPSIRT-2017-08234) This vulnerability has been assigned a Common Vulnerabilities and Exposures (CVE) ID: CVE-2020-9086.

Weakness classification

  • psirt@huawei.com: CWE-124
  • nvd@nist.gov: CWE-787

Primary references