« Back to list

CVE-2020-9067

Status: ModifiedHigh (8)—

There is a buffer overflow vulnerability in some Huawei products. The vulnerability can be exploited by an attacker to perform remote code execution on the affected products when the affected product functions as an optical line terminal (OLT). Affected product versions include:SmartAX MA5600T versions V800R013C10, V800R015C00, V800R015C10, V800R017C00, V800R017C10, V800R018C00, V800R018C10; SmartAX MA5800 versions V100R017C00, V100R017C10, V100R018C00, V100R018C10, V100R019C10; SmartAX EA5800 versions V100R018C00, V100R018C10, V100R019C10.

CVSS

Exploitation probability (EPSS)

EPSS (Exploit Prediction Scoring System, FIRST) estimates how likely a vulnerability is to be exploited in the wild within 30 days. It complements CVSS (impact) and CISA KEV (confirmed exploitation).

Affected technologies (3)

Huawei — Smartax Ea5800 FirmwareHuawei — Smartax Ma5600t FirmwareHuawei — Smartax Ma5800 Firmware

CWEs

References

Raw JSON (NVD)

Show
{
  "id": "CVE-2020-9067",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 5.2,
          "accessVector": "ADJACENT_NETWORK",
          "vectorString": "AV:A/AC:L/Au:S/C:P/I:P/A:P",
          "authentication": "SINGLE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "LOW",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 6.4,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 5.1,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 8,
          "attackVector": "ADJACENT_NETWORK",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "LOW",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.9,
        "exploitabilityScore": 2.1
      }
    ]
  },
  "affected": [
    {
      "source": "psirt@huawei.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "SmartAX MA5600T",
          "versions": [
            {
              "status": "affected",
              "version": "V800R013C10"
            },
            {
              "status": "affected",
              "version": "V800R015C00"
            },
            {
              "status": "affected",
              "version": "V800R015C10"
            },
            {
              "status": "affected",
              "version": "V800R017C00"
            },
            {
              "status": "affected",
              "version": "V800R017C10"
            },
            {
              "status": "affected",
              "version": "V800R018C00"
            },
            {
              "status": "affected",
              "version": "V800R018C10"
            }
          ]
        },
        {
          "vendor": "n/a",
          "product": "SmartAX MA5800",
          "versions": [
            {
              "status": "affected",
              "version": "V100R017C00"
            },
            {
              "status": "affected",
              "version": "V100R017C10"
            },
            {
              "status": "affected",
              "version": "V100R018C00"
            },
            {
              "status": "affected",
              "version": "V100R018C10"
            },
            {
              "status": "affected",
              "version": "V100R019C10"
            }
          ]
        },
        {
          "vendor": "n/a",
          "product": "SmartAX EA5800",
          "versions": [
            {
              "status": "affected",
              "version": "V100R018C00"
            },
            {
              "status": "affected",
              "version": "V100R018C10"
            },
            {
              "status": "affected",
              "version": "V100R019C10"
            }
          ]
        }
      ]
    }
  ],
  "published": "2020-04-02T21:15:13.927",
  "references": [
    {
      "url": "https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200401-01-overflow-en",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "psirt@huawei.com"
    },
    {
      "url": "https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200401-01-overflow-en",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-120"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "There is a buffer overflow vulnerability in some Huawei products. The vulnerability can be exploited by an attacker to perform remote code execution on the affected products when the affected product functions as an optical line terminal (OLT). Affected product versions include:SmartAX MA5600T versions V800R013C10, V800R015C00, V800R015C10, V800R017C00, V800R017C10, V800R018C00, V800R018C10; SmartAX MA5800 versions V100R017C00, V100R017C10, V100R018C00, V100R018C10, V100R019C10; SmartAX EA5800 versions V100R018C00, V100R018C10, V100R019C10."
    },
    {
      "lang": "es",
      "value": "Se presenta una vulnerabilidad de desbordamiento del búfer en algunos productos Huawei. Un atacante puede explotar la vulnerabilidad para llevar a cabo una ejecución de código remota en los productos afectados cuando el producto afectado funciona como un terminal de línea óptica (OLT). Las versiones de productos afectados incluyen: SmartAX MA5600T versiones V800R013C10, V800R015C00, V800R015C10, V800R017C00, V800R017C10, V800R018C00, V800R018C10; SmartAX MA5800 versiones V100R017C00, V100R017C10, V100R018C00, V100R018C10, V100R019C10; SmartAX EA5800 versiones V100R018C00, V100R018C10, V100R019C10."
    }
  ],
  "lastModified": "2026-06-17T03:27:26.413",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:huawei:smartax_ma5600t_firmware:v800r013c10:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A164C700-0C00-4536-9DC7-28212B3A578D"
            },
            {
              "criteria": "cpe:2.3:o:huawei:smartax_ma5600t_firmware:v800r015c00:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "EE95BA25-1998-422B-AC3D-8EF1A60C8564"
            },
            {
              "criteria": "cpe:2.3:o:huawei:smartax_ma5600t_firmware:v800r015c10:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1DC8A216-F784-4038-8A8E-2118D81ABD76"
            },
            {
              "criteria": "cpe:2.3:o:huawei:smartax_ma5600t_firmware:v800r017c00:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "DBEE3413-8909-48D1-94AA-6EBAAA40CEE0"
            },
            {
              "criteria": "cpe:2.3:o:huawei:smartax_ma5600t_firmware:v800r017c10:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E713F2DA-18E2-4CAF-8972-DF742627BBB7"
            },
            {
              "criteria": "cpe:2.3:o:huawei:smartax_ma5600t_firmware:v800r018c00:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0608D68B-B4A6-4B83-B6ED-8A892AA38605"
            },
            {
              "criteria": "cpe:2.3:o:huawei:smartax_ma5600t_firmware:v800r018c10:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9AC87D54-20D5-49C7-8698-297617ECA6D1"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:huawei:smartax_ma5600t:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "14106F76-4E6B-4377-ACFC-FDE6C3DB8FA8"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:huawei:smartax_ma5800_firmware:v100r017c00:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "78BD802F-5A10-42A4-AE67-F28A70DA1468"
            },
            {
              "criteria": "cpe:2.3:o:huawei:smartax_ma5800_firmware:v100r017c10:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9248DC4A-07C7-446F-A95D-C4CEC1BFA7A1"
            },
            {
              "criteria": "cpe:2.3:o:huawei:smartax_ma5800_firmware:v100r018c00:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D08191BA-E7E6-402F-8653-70A9044607D4"
            },
            {
              "criteria": "cpe:2.3:o:huawei:smartax_ma5800_firmware:v100r018c10:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B653563E-34ED-49E1-B79C-2074BA426BF2"
            },
            {
              "criteria": "cpe:2.3:o:huawei:smartax_ma5800_firmware:v100r019c10:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "6FF7926F-0868-41A9-BFB9-25A65982D06F"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:huawei:smartax_ma5800:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "7E647FBD-CD79-442B-AAC5-64A2419BBD76"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:huawei:smartax_ea5800_firmware:v100r018c00:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "019082B0-5A44-4655-91CC-C4C945CEE9B3"
            },
            {
              "criteria": "cpe:2.3:o:huawei:smartax_ea5800_firmware:v100r018c10:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "92096DD2-2E6D-4344-ABEF-E32360C9FE92"
            },
            {
              "criteria": "cpe:2.3:o:huawei:smartax_ea5800_firmware:v100r019c10:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "AEEB7EF9-0C90-4499-BE9D-2C649FA12572"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:huawei:smartax_ea5800:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "7598F036-E6B9-4552-B79F-800417F94CFD"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "sourceIdentifier": "psirt@huawei.com"
}