CVE-2020-9102
Estado: ModificadaBaja (3.3)—
There is a information leak vulnerability in some Huawei products, and it could allow a local attacker to get information. The vulnerability is due to the improper management of the username. An attacker with the ability to access the device and cause the username information leak.
Leer descripción completaMostrar menos
Affected product versions include: CloudEngine 12800 versions V200R002C50SPC800, V200R003C00SPC810, V200R005C00SPC800, V200R005C10SPC800, V200R019C00SPC800; CloudEngine 5800 versions V200R002C50SPC800, V200R003C00SPC810, V200R005C00SPC800, V200R005C10SPC800, V200R019C00SPC800; CloudEngine 6800 versions V200R002C50SPC800, V200R003C00SPC810, V200R005C00SPC800, V200R005C10SPC800, V200R005C20SPC800, V200R019C00SPC800; CloudEngine 7800 versions V200R002C50SPC800, V200R003C00SPC810, V200R005C00SPC800, V200R005C10SPC800, V200R019C00SPC800
CVSS
- Versión: 3.1
- Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
- Puntuación base: 3.3
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 0.20%
- Percentil entre todas las CVEs puntuadas: 9
- Fecha de la puntuación: 6/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (4)
CWE
- NVD-CWE-noinfo
Referencias
JSON original (NVD)
Mostrar
{
"id": "CVE-2020-9102",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 2.1,
"accessVector": "LOCAL",
"vectorString": "AV:L/AC:L/Au:N/C:P/I:N/A:N",
"authentication": "NONE",
"integrityImpact": "NONE",
"accessComplexity": "LOW",
"availabilityImpact": "NONE",
"confidentialityImpact": "PARTIAL"
},
"acInsufInfo": false,
"impactScore": 2.9,
"baseSeverity": "LOW",
"obtainAllPrivilege": false,
"exploitabilityScore": 3.9,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
],
"cvssMetricV31": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"scope": "UNCHANGED",
"version": "3.1",
"baseScore": 3.3,
"attackVector": "LOCAL",
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
"integrityImpact": "NONE",
"userInteraction": "NONE",
"attackComplexity": "LOW",
"availabilityImpact": "NONE",
"privilegesRequired": "LOW",
"confidentialityImpact": "LOW"
},
"impactScore": 1.4,
"exploitabilityScore": 1.8
}
]
},
"affected": [
{
"source": "psirt@huawei.com",
"affectedData": [
{
"vendor": "Huawei",
"product": "CloudEngine 12800",
"versions": [
{
"status": "affected",
"version": "V200R002C50SPC800"
},
{
"status": "affected",
"version": "V200R003C00SPC810"
},
{
"status": "affected",
"version": "V200R005C00SPC800"
},
{
"status": "affected",
"version": "V200R005C10SPC800"
},
{
"status": "affected",
"version": "V200R019C00SPC800"
}
]
},
{
"vendor": "Huawei",
"product": "CloudEngine 5800",
"versions": [
{
"status": "affected",
"version": "V200R002C50SPC800"
},
{
"status": "affected",
"version": "V200R003C00SPC810"
},
{
"status": "affected",
"version": "V200R005C00SPC800"
},
{
"status": "affected",
"version": "V200R005C10SPC800"
},
{
"status": "affected",
"version": "V200R019C00SPC800"
}
]
},
{
"vendor": "Huawei",
"product": "CloudEngine 6800",
"versions": [
{
"status": "affected",
"version": "V200R002C50SPC800"
},
{
"status": "affected",
"version": "V200R003C00SPC810"
},
{
"status": "affected",
"version": "V200R005C00SPC800"
},
{
"status": "affected",
"version": "V200R005C10SPC800"
},
{
"status": "affected",
"version": "V200R005C20SPC800"
},
{
"status": "affected",
"version": "V200R019C00SPC800"
}
]
},
{
"vendor": "Huawei",
"product": "CloudEngine 7800",
"versions": [
{
"status": "affected",
"version": "V200R002C50SPC800"
},
{
"status": "affected",
"version": "V200R003C00SPC810"
},
{
"status": "affected",
"version": "V200R005C00SPC800"
},
{
"status": "affected",
"version": "V200R005C10SPC800"
},
{
"status": "affected",
"version": "V200R019C00SPC800"
}
]
}
]
}
],
"published": "2020-07-17T23:15:11.397",
"references": [
{
"url": "https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200715-03-informationleak-en",
"tags": [
"Vendor Advisory"
],
"source": "psirt@huawei.com"
},
{
"url": "https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200715-03-informationleak-en",
"tags": [
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "NVD-CWE-noinfo"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "There is a information leak vulnerability in some Huawei products, and it could allow a local attacker to get information. The vulnerability is due to the improper management of the username. An attacker with the ability to access the device and cause the username information leak. Affected product versions include: CloudEngine 12800 versions V200R002C50SPC800, V200R003C00SPC810, V200R005C00SPC800, V200R005C10SPC800, V200R019C00SPC800; CloudEngine 5800 versions V200R002C50SPC800, V200R003C00SPC810, V200R005C00SPC800, V200R005C10SPC800, V200R019C00SPC800; CloudEngine 6800 versions V200R002C50SPC800, V200R003C00SPC810, V200R005C00SPC800, V200R005C10SPC800, V200R005C20SPC800, V200R019C00SPC800; CloudEngine 7800 versions V200R002C50SPC800, V200R003C00SPC810, V200R005C00SPC800, V200R005C10SPC800, V200R019C00SPC800"
},
{
"lang": "es",
"value": "Se presenta una vulnerabilidad de filtrado de información en algunos productos de Huawei, y podría permitir a un atacante local obtener información. La vulnerabilidad es debido a una administración inapropiada del nombre de usuario. Un atacante con la capacidad de acceder al dispositivo y causar el filtrado de información del nombre de usuario. Las versiones de productos afectados incluyen: CloudEngine 12800 versiones V200R002C50SPC800, V200R003C00SPC810, V200R005C00SPC800, V200R005C10SPC800, V200R019C00SPC800; CloudEngine 5800 versiones V200R002C50SPC800, V200R003C00SPC810, V200R005C00SPC800, V200R005C10SPC800, V200R019C00SPC800; CloudEngine 6800 versiones V200R002C50SPC800, V200R003C00SPC810, V200R005C00SPC800, V200R005C10SPC800, V200R005C20SPC800, V200R019C00SPC800; CloudEngine 7800 versiones V200R002C50SPC800, V200R003C00SPC810, V200R005C00SPC800, V200R005C10SPC800, V200R019C00SPC800"
}
],
"lastModified": "2026-06-17T03:27:30.053",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:huawei:cloudengine_12800_firmware:v200r002c50spc800:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D2A1D568-48C6-4CE4-8CD2-93F79F484448"
},
{
"criteria": "cpe:2.3:o:huawei:cloudengine_12800_firmware:v200r003c00spc810:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "32438232-3341-4056-B801-AA8F0F9E8DEC"
},
{
"criteria": "cpe:2.3:o:huawei:cloudengine_12800_firmware:v200r005c00spc800:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "32EF3B57-0B07-40C0-943D-2C21EEE4D747"
},
{
"criteria": "cpe:2.3:o:huawei:cloudengine_12800_firmware:v200r005c10spc800:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F6A9B879-DBF0-4F31-9BF8-7148BC2FCED5"
},
{
"criteria": "cpe:2.3:o:huawei:cloudengine_12800_firmware:v200r019c00spc800:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "067ADFDC-B001-4270-9CA2-37F670B3BFAC"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:huawei:cloudengine_12800:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "DE8A2875-0F7E-4790-A925-5999396B7578"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:huawei:cloudengine_5800_firmware:v200r002c50spc800:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C78467A9-4091-4710-BFB8-A6FB0606BDF5"
},
{
"criteria": "cpe:2.3:o:huawei:cloudengine_5800_firmware:v200r003c00spc810:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AB2923DC-9667-46F3-B879-C8C1DAECCC6F"
},
{
"criteria": "cpe:2.3:o:huawei:cloudengine_5800_firmware:v200r005c00spc800:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6BA3C214-FBB1-428A-8C0B-DF797296FC0E"
},
{
"criteria": "cpe:2.3:o:huawei:cloudengine_5800_firmware:v200r005c10spc800:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "38CAD360-6AD5-4714-91BE-0AAB516EDA79"
},
{
"criteria": "cpe:2.3:o:huawei:cloudengine_5800_firmware:v200r019c00spc800:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BCFEB001-EFF7-47AC-B67E-7B807780F009"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:huawei:cloudengine_5800:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "C8FD775C-F6B6-42B3-942E-EB4DC889B5F0"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:huawei:cloudengine_6800_firmware:v200r002c50spc800:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B7D33183-3C97-4EA6-90F7-55ED36F710E5"
},
{
"criteria": "cpe:2.3:o:huawei:cloudengine_6800_firmware:v200r003c00spc810:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DA5CC84F-27DD-4D5E-8F28-CD7D12EAD2D7"
},
{
"criteria": "cpe:2.3:o:huawei:cloudengine_6800_firmware:v200r005c00spc800:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7F5DDE2E-B7B3-4D7A-A3EA-C15F968F1186"
},
{
"criteria": "cpe:2.3:o:huawei:cloudengine_6800_firmware:v200r005c10spc800:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "369FD60C-215C-4172-9CFC-39AD5492BE17"
},
{
"criteria": "cpe:2.3:o:huawei:cloudengine_6800_firmware:v200r005c20spc800:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AAC7C877-066F-4FB8-9AB7-D038CE6E5D8D"
},
{
"criteria": "cpe:2.3:o:huawei:cloudengine_6800_firmware:v200r019c00spc800:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8D96A7C4-88BE-4353-AC75-AF6841EEB6F9"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:huawei:cloudengine_6800:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "19F2B3CC-12AD-466D-98F9-0C09C7C053CF"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:huawei:cloudengine_7800_firmware:v200r002c50spc800:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "14C55E1D-E4E8-4E8F-8D3E-E3A72C5A45D8"
},
{
"criteria": "cpe:2.3:o:huawei:cloudengine_7800_firmware:v200r003c00spc810:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "70D64B7D-AA9B-476B-8389-617799BAC702"
},
{
"criteria": "cpe:2.3:o:huawei:cloudengine_7800_firmware:v200r005c00spc800:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "72424532-AB07-47DF-8301-275D6EC2F6D9"
},
{
"criteria": "cpe:2.3:o:huawei:cloudengine_7800_firmware:v200r005c10spc800:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4196899F-1AB3-429A-B334-3B059DFBCAFD"
},
{
"criteria": "cpe:2.3:o:huawei:cloudengine_7800_firmware:v200r019c00spc800:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BA12B395-7D70-445A-B0FD-47363787D1EE"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:huawei:cloudengine_7800:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "D05E858C-A3D8-4BF1-A750-CFD8C949ABF0"
}
],
"operator": "OR"
}
],
"operator": "AND"
}
],
"sourceIdentifier": "psirt@huawei.com"
}