CVE-2020-9122: Huawei Hirouter-CD30-10 Firmware

Medium severity, CVSS 6.5. EPSS: 0.4% chance of exploitation in the next 30 days.

Some Huawei products have an insufficient input verification vulnerability. Attackers can exploit this vulnerability in the LAN to cause service abnormal on affected devices.Affected product versions include:HiRouter-CD30-10 version 10.0.2.5;HiRouter-CT31-10 version 10.0.2.20;WS5200-12 version 10.0.1.9;WS5281-10 version 10.0.5.10;WS5800-10 version 10.0.3.25;WS7100-10 version 10.0.5.21;WS7200-10 version 10.0.5.21.

Affected products

• Huawei Hirouter-CD30-10 Firmware: from 10.0.2.5, before 10.0.5.7 (fixed in 10.0.5.7)
• Huawei Hirouter-CT31-10 Firmware: from 10.0.2.20, before 10.0.2.37 (fixed in 10.0.2.37)
• Huawei WS5200-12 Firmware: from 10.0.1.9, up to and including 10.0.5.6
• Huawei WS5281-10 Firmware: from 10.0.5.10, before 10.0.5.32 (fixed in 10.0.5.32)
• Huawei WS5800-10 Firmware: from 10.0.3.25, before 10.0.3.33 (fixed in 10.0.3.33)
• Huawei WS7100-10 Firmware: from 10.0.5.21, before 10.0.5.37 (fixed in 10.0.5.37)
• Huawei WS7200-10 Firmware: from 10.0.5.21, before 10.0.5.37 (fixed in 10.0.5.37)

Published 2020-10-12. Last modified 2026-06-17.