CVE-2020-9067
Estado: ModificadaAlta (8)—
Se presenta una vulnerabilidad de desbordamiento del búfer en algunos productos Huawei. Un atacante puede explotar la vulnerabilidad para llevar a cabo una ejecución de código remota en los productos afectados cuando el producto afectado funciona como un terminal de línea óptica (OLT). Las versiones de productos afectados incluyen: SmartAX MA5600T versiones V800R013C10, V800R015C00, V800R015C10, V800R017C00, V800R017C10, V800R018C00, V800R018C10; SmartAX MA5800 versiones V100R017C00, V100R017C10, V100R018C00, V100R018C10, V100R019C10; SmartAX EA5800 versiones V100R018C00, V100R018C10, V100R019C10.
CVSS
- Versión: 3.1
- Vector: CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- Puntuación base: 8
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 0.62%
- Percentil entre todas las CVEs puntuadas: 48
- Fecha de la puntuación: 9/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (3)
CWE
- CWE-120
Referencias
JSON original (NVD)
Mostrar
{
"id": "CVE-2020-9067",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 5.2,
"accessVector": "ADJACENT_NETWORK",
"vectorString": "AV:A/AC:L/Au:S/C:P/I:P/A:P",
"authentication": "SINGLE",
"integrityImpact": "PARTIAL",
"accessComplexity": "LOW",
"availabilityImpact": "PARTIAL",
"confidentialityImpact": "PARTIAL"
},
"acInsufInfo": false,
"impactScore": 6.4,
"baseSeverity": "MEDIUM",
"obtainAllPrivilege": false,
"exploitabilityScore": 5.1,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
],
"cvssMetricV31": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"scope": "UNCHANGED",
"version": "3.1",
"baseScore": 8,
"attackVector": "ADJACENT_NETWORK",
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"integrityImpact": "HIGH",
"userInteraction": "NONE",
"attackComplexity": "LOW",
"availabilityImpact": "HIGH",
"privilegesRequired": "LOW",
"confidentialityImpact": "HIGH"
},
"impactScore": 5.9,
"exploitabilityScore": 2.1
}
]
},
"affected": [
{
"source": "psirt@huawei.com",
"affectedData": [
{
"vendor": "n/a",
"product": "SmartAX MA5600T",
"versions": [
{
"status": "affected",
"version": "V800R013C10"
},
{
"status": "affected",
"version": "V800R015C00"
},
{
"status": "affected",
"version": "V800R015C10"
},
{
"status": "affected",
"version": "V800R017C00"
},
{
"status": "affected",
"version": "V800R017C10"
},
{
"status": "affected",
"version": "V800R018C00"
},
{
"status": "affected",
"version": "V800R018C10"
}
]
},
{
"vendor": "n/a",
"product": "SmartAX MA5800",
"versions": [
{
"status": "affected",
"version": "V100R017C00"
},
{
"status": "affected",
"version": "V100R017C10"
},
{
"status": "affected",
"version": "V100R018C00"
},
{
"status": "affected",
"version": "V100R018C10"
},
{
"status": "affected",
"version": "V100R019C10"
}
]
},
{
"vendor": "n/a",
"product": "SmartAX EA5800",
"versions": [
{
"status": "affected",
"version": "V100R018C00"
},
{
"status": "affected",
"version": "V100R018C10"
},
{
"status": "affected",
"version": "V100R019C10"
}
]
}
]
}
],
"published": "2020-04-02T21:15:13.927",
"references": [
{
"url": "https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200401-01-overflow-en",
"tags": [
"Vendor Advisory"
],
"source": "psirt@huawei.com"
},
{
"url": "https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200401-01-overflow-en",
"tags": [
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "CWE-120"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "There is a buffer overflow vulnerability in some Huawei products. The vulnerability can be exploited by an attacker to perform remote code execution on the affected products when the affected product functions as an optical line terminal (OLT). Affected product versions include:SmartAX MA5600T versions V800R013C10, V800R015C00, V800R015C10, V800R017C00, V800R017C10, V800R018C00, V800R018C10; SmartAX MA5800 versions V100R017C00, V100R017C10, V100R018C00, V100R018C10, V100R019C10; SmartAX EA5800 versions V100R018C00, V100R018C10, V100R019C10."
},
{
"lang": "es",
"value": "Se presenta una vulnerabilidad de desbordamiento del búfer en algunos productos Huawei. Un atacante puede explotar la vulnerabilidad para llevar a cabo una ejecución de código remota en los productos afectados cuando el producto afectado funciona como un terminal de línea óptica (OLT). Las versiones de productos afectados incluyen: SmartAX MA5600T versiones V800R013C10, V800R015C00, V800R015C10, V800R017C00, V800R017C10, V800R018C00, V800R018C10; SmartAX MA5800 versiones V100R017C00, V100R017C10, V100R018C00, V100R018C10, V100R019C10; SmartAX EA5800 versiones V100R018C00, V100R018C10, V100R019C10."
}
],
"lastModified": "2026-06-17T03:27:26.413",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:huawei:smartax_ma5600t_firmware:v800r013c10:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A164C700-0C00-4536-9DC7-28212B3A578D"
},
{
"criteria": "cpe:2.3:o:huawei:smartax_ma5600t_firmware:v800r015c00:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EE95BA25-1998-422B-AC3D-8EF1A60C8564"
},
{
"criteria": "cpe:2.3:o:huawei:smartax_ma5600t_firmware:v800r015c10:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1DC8A216-F784-4038-8A8E-2118D81ABD76"
},
{
"criteria": "cpe:2.3:o:huawei:smartax_ma5600t_firmware:v800r017c00:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DBEE3413-8909-48D1-94AA-6EBAAA40CEE0"
},
{
"criteria": "cpe:2.3:o:huawei:smartax_ma5600t_firmware:v800r017c10:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E713F2DA-18E2-4CAF-8972-DF742627BBB7"
},
{
"criteria": "cpe:2.3:o:huawei:smartax_ma5600t_firmware:v800r018c00:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0608D68B-B4A6-4B83-B6ED-8A892AA38605"
},
{
"criteria": "cpe:2.3:o:huawei:smartax_ma5600t_firmware:v800r018c10:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9AC87D54-20D5-49C7-8698-297617ECA6D1"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:huawei:smartax_ma5600t:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "14106F76-4E6B-4377-ACFC-FDE6C3DB8FA8"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:huawei:smartax_ma5800_firmware:v100r017c00:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "78BD802F-5A10-42A4-AE67-F28A70DA1468"
},
{
"criteria": "cpe:2.3:o:huawei:smartax_ma5800_firmware:v100r017c10:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9248DC4A-07C7-446F-A95D-C4CEC1BFA7A1"
},
{
"criteria": "cpe:2.3:o:huawei:smartax_ma5800_firmware:v100r018c00:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D08191BA-E7E6-402F-8653-70A9044607D4"
},
{
"criteria": "cpe:2.3:o:huawei:smartax_ma5800_firmware:v100r018c10:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B653563E-34ED-49E1-B79C-2074BA426BF2"
},
{
"criteria": "cpe:2.3:o:huawei:smartax_ma5800_firmware:v100r019c10:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6FF7926F-0868-41A9-BFB9-25A65982D06F"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:huawei:smartax_ma5800:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "7E647FBD-CD79-442B-AAC5-64A2419BBD76"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:huawei:smartax_ea5800_firmware:v100r018c00:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "019082B0-5A44-4655-91CC-C4C945CEE9B3"
},
{
"criteria": "cpe:2.3:o:huawei:smartax_ea5800_firmware:v100r018c10:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "92096DD2-2E6D-4344-ABEF-E32360C9FE92"
},
{
"criteria": "cpe:2.3:o:huawei:smartax_ea5800_firmware:v100r019c10:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AEEB7EF9-0C90-4499-BE9D-2C649FA12572"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:huawei:smartax_ea5800:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "7598F036-E6B9-4552-B79F-800417F94CFD"
}
],
"operator": "OR"
}
],
"operator": "AND"
}
],
"sourceIdentifier": "psirt@huawei.com"
}