CVE-2020-9210 Security feature bypass in Myna
Attackers can install malware on Huawei Myna devices due to insufficient integrity checks, compromising normal service operations.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2020-9210?
CVE-2020-9210 is a medium-severity vulnerability in Huawei Myna, published on 27 Dec 2024. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
There is an insufficient integrity vulnerability in Huawei products. A module does not perform sufficient integrity check in a specific scenario. Attackers can exploit the vulnerability by physically install malware. This could compromise normal service of the affected device. (Vulnerability ID: HWPSIRT-2020-00145)
This vulnerability has been assigned a Common Vulnerabilities and Exposures (CVE) ID: CVE-2020-9210.
Weakness: CWE-354
Which versions are affected by CVE-2020-9210?
It affects 1 product.
Products include Huawei Myna Firmware.
How do I fix CVE-2020-9210?
No fix has been published for CVE-2020-9210 yet. Limit exposure of the affected software until one is available.
Is CVE-2020-9210 being exploited?
There is no known exploitation of CVE-2020-9210 in the wild and no public exploit code.
Other vulnerabilities in Huawei Myna
Sources
Also known as GHSA-4cqj-vg46-4946.