CVE-2020-9071: Huawei AR120-S Firmware

Medium severity, CVSS 6.5. EPSS: 0.6% chance of exploitation in the next 30 days.

There is a few bytes out-of-bounds read vulnerability in some Huawei products. The software reads data past the end of the intended buffer when parsing certain message, an authenticated attacker could exploit this vulnerability by sending crafted messages to the device. Successful exploit may cause service abnormal in specific scenario.Affected product versions include:AR120-S versions V200R007C00SPC900,V200R007C00SPCa00

Affected products

  • Huawei AR120-S Firmware: version v200r007c00spc900 only; version v200r007c00spca00 only; version v200r007c00spcb00 only; version v200r007c00spcc00 only
  • Huawei AR1200-S Firmware: version v200r007c00spc900 only; version v200r007c00spcb00 only; version v200r007c00spcc00 only
  • Huawei AR1200 Firmware: version v200r007c00spc900 only; version v200r007c00spc900pwe only; version v200r007c00spca00 only; version v200r007c00spcb00 only; version v200r007c00spcb00pwe only; version v200r007c00spcc00 only
  • Huawei AR150-S Firmware: version v200r007c00spc900 only; version v200r007c00spcb00 only; version v200r007c00spcc00 only
  • Huawei AR150 Firmware: version v200r007c00spc900 only; version v200r007c00spc900pwe only; version v200r007c00spcb00 only; version v200r007c00spcb00pwe only; version v200r007c00spcc00 only
  • Huawei AR160 Firmware: version v200r007c00spc900 only; version v200r007c00spc900pwe only; version v200r007c00spcb00 only; version v200r007c00spcb00pwe only; version v200r007c00spcc00 only
  • Huawei AR200-S Firmware: version v200r007c00spc900 only; version v200r007c00spcb00 only; version v200r007c00spcc00 only
  • Huawei AR200 Firmware: version v200r007c00spc900 only; version v200r007c00spc900pwe only; version v200r007c00spcb00 only; version v200r007c00spcb00pwe only; version v200r007c00spcc00 only
  • Huawei AR2200-S Firmware: version v200r007c00spc900 only; version v200r007c00spcb00 only; version v200r007c00spcc00 only
  • Huawei AR2200 Firmware: version v200r007c00spc900 only; version v200r007c00spc900pwe only; version v200r007c00spca00 only; version v200r007c00spcb00 only; version v200r007c00spcb00pwe only; version v200r007c00spcc00 only
  • Huawei AR3200 Firmware: version v200r007c00 only; version v200r007c00spc900 only; version v200r007c00spc900pwe only; version v200r007c00spca00 only; version v200r007c00spcb00 only; version v200r007c00spcb00pwe only; …
  • Huawei AR3600 Firmware: version v200r007c00spc900 only; version v200r007c00spc900pwe only; version v200r007c00spcb00 only; version v200r007c00spcb00pwe only; version v200r007c00spcc00 only
  • Huawei AR510 Firmware: version v200r007c00spc900 only
  • Huawei NETENGINE16EX Firmware: version v200r007c00spc900 only; version v200r007c00spcb00 only; version v200r007c00spcc00 only
  • Huawei SRG1300 Firmware: version v200r007c00spc900 only; version v200r007c00spcb00 only; version v200r007c00spcc00 only
  • Huawei SRG2300 Firmware: version v200r007c00spc900 only; version v200r007c00spcb00 only; version v200r007c00spcc00 only
  • Huawei SRG3300 Firmware: version v200r007c00spc900 only; version v200r007c00spcb00 only; version v200r007c00spcc00 only

Published 2020-06-01. Last modified 2026-06-17.