CVE-2020-9069There is an information leakage vulnerability in some Huawei products. An unauthenticated, adjacent attacker could exploit this…
- 6.5MediumCVSS base score
- 0.34%Exploitation in 30 daysEPSS · top 73% of all CVEs
- NoKnown exploitednot in CISA's KEV catalog
- NonePublic exploitsnone known yet
Description
There is an information leakage vulnerability in some Huawei products. An unauthenticated, adjacent attacker could exploit this vulnerability to decrypt data. Successful exploitation may leak information randomly. Affected product versions include: Anne-AL00 Versions earlier than 9.1.0.331(C675E9R1P3T8); Berkeley-L09 Versions earlier than 10.0.1.1(C675R1); CD16-10 Versions earlier than 10.0.2.8; CD17-10 Versions earlier than 10.0.2.8; CD17-16 Versions earlier than 10.0.2.8; CD18-10 Versions earlier than 10.0.2.8; CD18-16 Versions earlier than 10.0.2.8; Columbia-TL00B Versions earlier than 9.0.0.187(C01E181R1P20T8); E6878-370 Versions earlier than 10.0.5.1(H610SP10C00); HUAWEI P30 lite Versions earlier than 10.0.0.185(C605E3R1P3), Versions earlier than 10.0.0.197(C432E8R2P7); HUAWEI nova 4e Versions earlier than 10.0.0.158(C00E64R1P9); Honor 10 Lite 9.0.1.113(C675E11R1P12); LelandP-L22A Versions earlier than 9.1.0.166(C675E5R1P4T8); Marie-AL00AX Versions earlier than 10.0.0.158(C00E64R1P9); Marie-AL00AY Versions earlier than 10.0.0.158(C00E64R1P9); Marie-AL00BX Versions earlier than 10.0.0.158(C00E64R1P9); Marie-L03BX Versions earlier than 10.0.0.188(C605E5R1P1); Marie-L21BX Versions earlier than 10.0.0.188(C432E4R4P1), Versions earlier than 10.0.0.188(C461E5R3P1); Marie-L22BX Versions earlier than 10.0.0.188(C636E3R3P1); Marie-L23BX Versions earlier than 10.0.0.188(C605E5R1P1); TC5200-16 Versions earlier than 10.0.2.8; WS5200-11 Versions earlier than 10.0.2.8; WS5200-12 Versions earlier than 10.0.2.23; WS5200-16 Versions earlier than 10.0.2.8; WS5200-17 Versions earlier than 10.0.2.23; WS5800-10 Versions earlier than 10.0.3.27; WS6500-10 Versions earlier than 10.0.2.8; WS6500-16 Versions earlier than 10.0.2.8
Timeline
ID reserved
By huawei
- 3 months later
· 3 months later
Published
- 4 years later
· 4 years later
Record updated
Changes after publication (a new score, a public exploit, EPSS crossing 1, 10 or 50 %, leaving KEV) are kept since November 2026; earlier ones are not known.
Scores
| Scored by | CVSS | Score | Vector |
|---|---|---|---|
| NVDNVD · Modified | 3.1 | Medium6.5 | CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N |
- EPSS (exploitation in 30 days)
- 0.34% · top 73% of all CVEs (13 Nov 2026)
The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 6.5.
Affected products
- affected earlier than 9.1.0.331(C675E9R1P3T8)
- affected earlier than 10.0.1.1(C675R1)
- affected earlier than 10.0.2.8
- affected earlier than 10.0.2.8
- affected earlier than 10.0.2.8
- affected earlier than 10.0.2.8
- affected earlier than 10.0.2.8
- affected earlier than 9.0.0.187(C01E181R1P20T8)
- affected earlier than 10.0.5.1(H610SP10C00)
- affected earlier than 10.0.0.185(C605E3R1P3)
- affected earlier than 10.0.0.197(C432E8R2P7)
- affected earlier than 10.0.0.158(C00E64R1P9)
- affected 9.0.1.113(C675E11R1P12)
- affected earlier than 9.1.0.166(C675E5R1P4T8)
- affected earlier than 10.0.0.158(C00E64R1P9)
- affected earlier than 10.0.0.158(C00E64R1P9)
- affected earlier than 10.0.0.158(C00E64R1P9)
- affected earlier than 10.0.0.188(C605E5R1P1)
- affected earlier than 10.0.0.188(C432E4R4P1)
- affected earlier than 10.0.0.188(C461E5R3P1)
- affected earlier than 10.0.0.188(C636E3R3P1)
- affected earlier than 10.0.0.188(C605E5R1P1)
- affected earlier than 10.0.2.8
- affected earlier than 10.0.2.8
- affected earlier than 10.0.2.23
- affected earlier than 10.0.2.8
- affected earlier than 10.0.2.23
- affected earlier than 10.0.3.27
- affected earlier than 10.0.2.8
- affected earlier than 10.0.2.8
References
References1
- https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200520-01-leakage-en (opens in a new tab)x_refsource_CONFIRMx_transferred
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- EUVD EUVD-2020-29898 (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://cveledger.app/cve/CVE-2020-9069)Record last updated .