CVE-2020-9085 Null dereference in HUAWEI 4G Router B612
An attacker can cause a denial of service on Huawei 4G routers by sending specially crafted POST messages that trigger a null pointer dereference.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2020-9085?
CVE-2020-9085 is a medium-severity vulnerability in HUAWEI 4G Router B612, published on 27 Dec 2024. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
There is a NULL pointer dereference vulnerability in some Huawei products. An attacker may send specially crafted POST messages to the affected products. Due to insufficient validation of some parameter in the message, successful exploit may cause some process abnormal. (Vulnerability ID: HWPSIRT-2017-10105)
This vulnerability has been assigned a Common Vulnerabilities and Exposures (CVE) ID: CVE-2020-9085.
Weakness: CWE-476
Which versions are affected by CVE-2020-9085?
It affects 1 product.
Products include Huawei B612 Firmware.
How do I fix CVE-2020-9085?
No fix has been published for CVE-2020-9085 yet. Limit exposure of the affected software until one is available.
Is CVE-2020-9085 being exploited?
There is no known exploitation of CVE-2020-9085 in the wild and no public exploit code.
Other vulnerabilities in HUAWEI 4G Router B612
Sources
Also known as GHSA-v55h-fmcq-hv7v.