CVE-2020-9241

HighCVSS 7.0/10Last modified Jun 17, 2026

Description

Huawei 5G Mobile WiFi E6878-370 with versions of 10.0.3.1(H563SP1C00),10.0.3.1(H563SP21C233) have an improper authorization vulnerability. The device does not restrict certain data received from WAN port. Successful exploit could allow an attacker at WAN side to manage certain service of the device.

Metrics

CVSS 3.1 7.0/10CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H

Affected software

No affected versions have been published.

Timeline

Published
Aug 17, 2020
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2020

CVE-2020-92428.8FusionCompute 8.0.0 have a command injection vulnerability. The software does not sufficiently validate certain parameters post from user, sCVE-2020-92435.5HUAWEI Mate 30 with versions earlier than 10.1.0.150(C00E136R5P3) have a denial of service vulnerability. The system does not properly limitCVE-2020-92446.8HUAWEI Mate 20 versions Versions earlier than 10.1.0.160(C00E160R3P8);HUAWEI Mate 20 Pro versions Versions earlier than 10.1.0.270(C431E7R1PCVE-2020-92455.5HUAWEI P30 versions Versions earlier than 10.1.0.160(C00E160R2P11);HUAWEI P30 Pro versions Versions earlier than 10.1.0.160(C00E160R2P8) havCVE-2020-92466.5FusionCompute 8.0.0 has an information leak vulnerability. A module does not launch strict access control and information protection. AttackCVE-2020-92477.8There is a buffer overflow vulnerability in several Huawei products. The system does not sufficiently validate certain configuration parametCVE-2020-92486.7Huawei FusionComput 8.0.0 have an improper authorization vulnerability. A module does not verify some input correctly and authorizes files wCVE-2020-92496.5HUAWEI P30 smartphones with versions earlier than 10.1.0.160(C00E160R2P11) have a denial of service vulnerability. A module does not deal wiCVE-2020-92503.3There is an insufficient authentication vulnerability in some Huawei smart phone. An unauthenticated, local attacker can crafts software pacCVE-2020-92512.4HUAWEI Mate 20 smartphones with versions earlier than 10.1.0.160(C00E160R2P11) have an improper authorization vulnerability. The software doCVE-2020-92522.3HUAWEI Mate 20 versions earlier than 10.1.0.160(C00E160R3P8), HUAWEI Mate 20 X versions earlier than 10.1.0.135(C00E135R2P8), HUAWEI Mate 20CVE-2020-92536.5There is a stack overflow vulnerability in some Huawei smart phone. An attacker can craft specific packet to exploit this vulnerability. Due
CVE-2020-9241: High severity, CVSS 7.0 | Vulnix