CVE-2020-9122 Other in HiRouter-CD30-10;HiRouter-CT31-10;WS5200-12;WS5281-10;WS5800-10;WS7100-10;WS7200-10
Attackers on the local network can cause service disruption on Huawei routers due to insufficient input verification.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2020-9122?
CVE-2020-9122 is a medium-severity vulnerability in HiRouter-CD30-10;HiRouter-CT31-10;WS5200-12;WS5281-10;WS5800-10;WS7100-10;WS7200-10, published on 12 Oct 2020. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
Some Huawei products have an insufficient input verification vulnerability. Attackers can exploit this vulnerability in the LAN to cause service abnormal on affected devices.Affected product versions include:HiRouter-CD30-10 version 10.0.2.5;HiRouter-CT31-10 version 10.0.2.20;WS5200-12 version 10.0.1.9;WS5281-10 version 10.0.5.10;WS5800-10 version 10.0.3.25;WS7100-10 version 10.0.5.21;WS7200-10 version 10.0.5.21.
Weakness: CWE-20
Which versions are affected by CVE-2020-9122?
It affects 7 products.
Products include Huawei Hirouter-Cd30-10 Firmware, Huawei Hirouter-Ct31-10 Firmware, Huawei Ws5200-12 Firmware, Huawei Ws5281-10 Firmware, Huawei Ws5800-10 Firmware, Huawei Ws7100-10 Firmware and 1 more.
How do I fix CVE-2020-9122?
No fix has been published for CVE-2020-9122 yet. Limit exposure of the affected software until one is available.
Is CVE-2020-9122 being exploited?
There is no known exploitation of CVE-2020-9122 in the wild and no public exploit code.
Sources
Also known as GHSA-x5qr-84mx-9wx2.