CVE-2020-9085: Huawei b612 Firmware

Medium severity, CVSS 5.3. EPSS: 0.4% chance of exploitation in the next 30 days.

There is a NULL pointer dereference vulnerability in some Huawei products. An attacker may send specially crafted POST messages to the affected products. Due to insufficient validation of some parameter in the message, successful exploit may cause some process abnormal. (Vulnerability ID: HWPSIRT-2017-10105) This vulnerability has been assigned a Common Vulnerabilities and Exposures (CVE) ID: CVE-2020-9085.

Affected products

• Huawei b612 Firmware: version b612s-25dtcpu-v100r001b192d03sp00c234 only; version b612s-25dtcpu-v100r001b192d03sp00c287 only; version b612s-25dtcpu-v100r001b192d05sp00c00 only

Published 2024-12-27. Last modified 2026-06-17.